ALL INFOKM&TIQN CX 3 STTAIN 1 D 

HEBE IN IS UNC LAS SIFIED 

DATE 10 - 30-2014 BY NSICG/C 32 W 33 B 91 


i Sensitive But UnOossifisa 


FBI PRIVACY TERESHOL0 ANALYSIS (FTA) 

(Equivalent io Use 003 initial. Privacy Assessment (IPA)l 


NAME OF SYSTEM / PROJECT: ilfodie aec«ad 


BIK.R FBI llnkpe Asset IB: IS/A (Protect;.sf0lin .. ca r f v Ba p s of JoveSopatl 


IXeixssifv Dm 


| SYST EM/PBOdECT POC 
| Nara d I 

| Program Office: 

| QMs fon: 'Office of Gen eral Counsel 
j Phone:; l~ I 


FBI OGC/PCLB POC;; 
Name: 

Phone: 


: Room Number: PA-400 


Room Number: 73 SO 


Program Division: 
ffoscrs division name! 


FBOTQ Division: 
Ottsee or General 
CoifoPl 


.FBI MVTSI0H INTERMEDIATE APPROVALS [complete as necessary mmmmt with 
Mv \mm pofteyj 

] Program Manager (or other agproprisre \ Division Privacy Officer 

j executive a s Division determines) 
i Signature: 


Pate signed: 
Name: 


[ Title: 




| NtgmUure; 
j .Date signed; 
| Name: 

! Title: 


| Title: Chief of Staff. Office of General 
I Counsel 


I Title: 


b7E 


b6 

b7C 



Alter nil division approvals, forward signed hard copy gins ekmlrook copy to FBI 

occ/pclc <;roi rm). 

('The FBI. Privacy msd Civil liberties Officers determinations,. emxbnomo uml/or final approval 
will ix: recorded on the following paged 

Egon lisa! EM approval, FBI OCC/PCLC will dlstrilmle as follows; 

1 - Signed original to file 190-RQ-Ci. 321794 (iwd to JEB IB.2D4 via PA-520) 


Copies (recipients please prist/reproduce as needed for Program/Division Elds}): 


1 - DOi Office of Privacy and Civil Liberties (vis e-mail to 
pnwcyd|tt:$do.:F go v) 

(if classified, via hand delivery fo 1331 Penn, Ave. KW, Suite 940> 
20550) 

2 - FBI OCIO / OlfP (111 9376, fol d 
t * FBI SeoD/AU (elec, copy: via e-mail to OC 
I - RMD/EMAO (ami. 


J 


- OOCxPCLli intranet 

- PCLU UC 

•> PCLIJ Library 

- PCLIJ Tickler 


2 - Program Division POC /Privacy Officer 
2 - FBilif) Division PCX;./Privacy Officer 


• v a ns Owe t; n t t.; x etona i ts : 
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FIN AL FBI APPROVAL / DETERMINATIONS / CONDITIONS; j This stetson n III W 
completed by the FBI FOT'/PCLO Mkmfog FT A Msbmswkm. !iw FT A d miter Tf^mb 
.T ap to the next p a g e and o mtmue.i 

.PIA is required by te® E^ovemmenf Act. 

PIA b te he completed a jbmw* of FBI/DOJ discretion. 

Is- PIA to be published on PBI.GOV {alto a tty RMO FOIA redactions}?.Yes. 


No (indkam reason): 


js,_PIA is mt required For tbs? foilowkg reasons): 

System dote;ip;:l||!bok iMfotem, or disseminate Pi. 

System is grnnb&thered (m existence before 4/17/2003; so later changes posing sigteficMt privacy risks}. 
_information in the system relates to Internal government operations. 

System has been previously assessed under m evaluation similar to a PIA. 

......... No slgnirimm? privacy Issues (or privacy Issues are unchanged). 

s. Other (doseribo): This FTA is mteaded to cover the rofmsfotciyre, which, includes the .physical laptop and 
wireless connectivity capabilities, and hot the files or programs on the laptop that content personalty identifiable 
information (F.II), The functions performed on the laptop will be similar If not Identical to functions performed in she 
individual user's daily work activities, which are already covered under existing privacy documentation.. Finally, 
although using s laptop with a wireless connection to process information outside the office poses additional security 
risks-, those risks are mitigated through the use of encryption and other security measures, which are described in other 
documents. 


Applicable SORN(s); N/A, 

NotifV FBI RMQ/RIOY net MIOG i90.2.3?_x No _Yew-Tee sample EC on PCI.U iutranct svcbslte hem: 


S©E.NfSORN revk(on.(s) required? xNo 


Ye* (mdksto visions 


P:rep:^m?vfee/a<k? Fdvgcy Act (cx 3 ) M&fems&Is fe related ferns? x No Yes (mdtoMe fern* affect): 


RECORDS. The program s&ouM consult. with RMD to iSoittiferosoIvo aoy Federal rcoordxOiccTOoio records Cvce* 
Tito system may eoftta.m Fodcml records whether or oot it coma ms Privacy Act requestarid. So obv ovobF s records 
schedule approved by the N&tkm&l Archives ami Records AdmioI&tr adoo is MCS$fey, RMD provide advice on this 
yywrjl ^ oo compihmce with tcqvdmBOOts : fe O qetroofc FRS racc ^sasy updates. 

Other: N/A, 


David C, LarsoOv .Deputy Geoeml Counsel j| Ssgnaterc: 

FBI Privacy md Civil Liberties Officer ji Date Steoed; 


: OXy 


... J.° .><•> ...S, c «‘‘ \ .; ... 

A :: VdC ^ 


iSesfemc IfoX E-ocErrxifl:cr!| 


EPIC -264 





































I, INFORMATION ABOUT THE SYSTEM / PROJECT 

1, Provide a generli description of the system or project that includes: name of the 
sysdem/prnject, including associated mrtmyms* structure of the system/proJecT 
purpose; nature of the luformurion fa the system aad how it will be used; who will 
have access to the Information to the 'system and the manner of transmission to si 
users, (This kind ofmfommikm may he available in. the System Security Plot), if 
available, or from a Concept of Operations document, andean, he cut and posted here,): 

The FB.Fs Office of General Counsel (OGC) plans to a ccess the PBffo _ 

unclassified network (U'NET) re motely with FBI .issued'laptop ^ ~| 

| This FT A is intended to cover the tnffosfowfore, winch 
includes the physical laptop and connectivity capabilities, and not the lies or programs 
on the l anion that contain FIX 


The fonctions performed on foe laptop will he similar if not: identical, to fooctions 
performed In foe individual-■ mar’s dally work activities -while located In the office. 
Although using a laptop with a. wireless connection to process mfomndiou outside the 
office poses additional security risks,, such as the loss of information, which Includes PJL 
those risks are .mitigated through the use of encryption and other security measures, 
which are discussed In other documents, 

2, .Does foe sysiem/project collect rhaiatain,. or disseminate any information about 
individuals in identifiable form, i,e,, is information linked to or linkable to specific 
individuals (which Is the definition of personally identifiable .information (PH)}? 

.....x.NO pfoo,: ST OP, The PTA is now complete and after division approvals) 

forndd be submitted to Tiff 0GC/FCLU for final Fill approval. Unless yon: tire 
stbemise advised, no PI A 1$ respired, j 


In part. Section 20b of the E-Govemmcot Act. requites a privacy impact 
assessment. (PIA) before developing or procuring Information technology that collects, 
maintains, or disseminates information that is in an identifiable form, Section 201(d) 
defines ‘identifiable form” as ffiny representation of information that permits foe identity 






one could argue that the Information transmitted^ 


is m 


Identifiable form once the transmission Is complete, and therefore might trigger 
additional, privacy documentation under Section 2CII, Thu®, one should note that any 
application used to generate or receive rite information transmitted should already be 
covered by applicable privacy documentation, which includes a discussion of how 
information is transmitted and received, 

1 Further, shhough files and programs on the laptops will obviously contain 
information in identifiable form, the individuals who utilize the laptops outside of the 
office will not be performing functions that are different from functions already 
performed in foe office. The information contained within files and/or programs on the 
laptop Is presumably covered under existing privacy documentation. Therefore, in. 
accordance with M-D3-22, this initiative does not requite another PIA since die privacy 
Issues were already assessed. Moreover, since this PTA. only covers die laptop 
mlfostructiae and not the foformarion In the files andfor programs on foe laptop, a PIA is 
not required 
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Here, foe infonnath 


1 mis. 


|is not retrieved by an identifying particular, 
constitute a system ol. records, and rherelbre the 
Privacy Act s svsfem of records notice requirement is not tfionbred. 

Further, although laptops may contain fofooBafion about .individuals, foe users 
who utilise the laptops outside of the office will not be performing functions that are 
different from functions .already performed in the office. Therefore, the information 
contained within fifes and/or programs on the laptops is presumably covered, under 
existing systems of records notices. Moreover, since this PTA only covers the laptop 
infrastructure and not the Information in the files and/or programs on foe laptop, m 
additional Privacy Act requirements are triggered by the laptop irdkfohmottue. 

_YES pf yes, please continue.] 


3, Does the svstem/prqfoct pertain, only to government employees, contractors, or 
consultants'? 


NO 


YES 


4. Is information about United States citkerrs or lawfully, admitted permanent resident 
aliens retrieved from the system/projeet by name or other personal identifier? 














5. Are Social Security Numbers CSSNs) collected; maintained or disseminated from the 
sysiem/oroket? 


YES If yes, «J*«* 


SSNs am necessary to esfablish/conirm the identity of subjects, victims.; 
witnesses or sources in this law enforcement or intelligence activity. 


SSNs are necessary to identify FBI personnel in this internal ndinisiistrative 


system. 


SSNs are Important for reasons. Describe; 


.The systern/project provides special protection to SSNs (e,g>, SSNs arc 

encrypted; bidden from all users via a look-up table, or only available to certain 
users). Dos cri he t 

_ _It is not feasible for the system/pcpjecl to provide special protection to 

SSNs, Explain: 


6. Does the systendprojeot collect any information directly from the person who is foe 
subject of the information? 


NO [If no, proceed to question ?.J 
YES 


a. Does the system/projeer support criminal, CT, or EO Investigations or 
assessments? 


YES p.f yes. proceed to question ?*] 


NO 


b. Are subjects of Information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a. 
senarate notices? 


[■Sensitive lint l.lnclusallfed| 


















iTfie program will pm4 to work with FCLU to ^'dopHmpUmmt 
the necessary for mfs),| 

YES Identify aay Ntrttis, paper or electronic* ased to roqnmi mch 
Inform«t§«« fw»m lie l»fori»a tio» fiibjeet: 

17, Has tie system imdergone Certification. & Accreditation (G&A) fey the l' : 81 Security 
Division (SocD)t 

MO II to, hidleate reasoni if CdtA is pending, provide aMielpated 
rompletioh date: 


YES If yes, provide date of last C&A. e«rtlieaioh/re*eertlEeatleo 


_ Dotfi Know, 

8. is this sysiervprqiect the sutrjeet of an OMB-DOO budget submission? 
MO 


Don't know _ _ YES If yes, please provide 

the date and name or title of tie 
OMB sohmisskm; 


9, Is this a national security system (as detetthtded fey the SeeD}? 

NO YES Don't knots 


10, Status of System/ Project: 

This is a new system/ project in development, [If you cheeked this block, 
STOP. Tie FFA is now complete and alter ilvMIno approvtks) shrndd he 
submitted to FBI OOC/PCLtJ for final FBI approv al and determination If 
FI A and/or other actions are respired.) 


II, ENISTINB SYSTEMS / PROJECTS 
I. When was the systein/ptolea developed? 

2-, Has the system/pftpect undergone any significant changes since April 17, 2003? 

















YES If yes, Meats which of the following changes were Invol ved (mark all 
boxes that apply); 


A conversion from paper-based records to an deefpoute system 


.. A change from Information in a format that is anonymous or non- 

Identifiable to a format that is Identifiable to particular Individuals. 

A new use of an. IT sysiem/profeet, including application of a new 
technology,, that changes how Information In identifiable form is managed. 
(For example. a. change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

___ A change that results in information in. idetfofiaMe form being 

merged* centralized, nr matched with other databases. 


A new method of authenticating the use of and access to 
information in identifiable: form fey members of the public. 


A. systematic incorporation, of databases of iufomtaifon in 
identifiable form purchased or obtained from commercial or public sources 

A new Interagency use or shared auenev function that results in 


new uses or exchanges of information in identifiable form. 

A change that, results in a new use or disclosure of information in 
I deoil flab le form. 

A change that results in new items of information in identifiable 
m ifeig added, into the system/project 

_Changes do not involve a change in the .type of records, rnalntalned,: 

the indi viduals on whom records are maintained, or file use or 
dissemination of mforinalioo from the system/prqject. 


dfher f Provide brief explanation!; 


Does a Pf.A for ibis aystem/profoet already exist? 


K!A 

tAU 


YES 


a, Provide date/titie of the HA: 



















b. Has ills ^ystem/project undergone my aigriitlcam changes since the P!.A? 
NO YES 


jTfee FTA i$ new complete amf alter illvislnn apprimtl(s) should fee mbm hied to 
FBI OCIOFCLIJ for feel FBI approval and deiereimailen If FI A aad/or oiler 
actions are m§nimi] 


| S en sill v e B a t 0 a elasslB ed | 
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i^.NO’ASSIFllCI) 

FINAL FBI APPROVAL / DETERMINATIONS i CONDITIONS; Fill Itiflii 

FCLU/EO.O follo wing FI A Mlijlli liil The 

:|i ^ PIA Is tespsred by the BAAwetnrneot Act. 

I . FL4 is to be ocwgMed m a matter ofFBTDOJ discretion, 

i] Is PIA to ho published oo RBI.O0Y" (sitor any AMD POIA .redactions)? ......... Yes, ..No (Indicate reason); 


X PM it not te^dimi tor the M!dtei»| ?ee«t{s)t * v 4 .; • 

X' System does not collect, mnsntain x or disseminate FI!.. <$¥€■• ||' $£$&¥*' 

' System. is graadfatheted (m existence before 4/1?/2003:; no later changes fmoing sign.ifktmt privacy risks 
Intomtetion in the system, fotutes to interne! -government operations. 

Systetl has been previously assessed under-an evaluation similar. te>a PIA. 

No sigfolrcunt privacy Issues (or privacy Issues ere unehaoged). 

Other (describe); 


Applicable SORNfs): 

Notify FBI. RMD/R 1 DS per M!O 0 : 1 f 0 , 2,32 No . Yus-See sample EC cut PCI C intranet website here: 

hrp> Ou>:Y:S/DO, : <XK. : .i.3TCFCLU;PrivscyC:h 0 : A20Libeo-ssAt0Lions?>. : iono for mfogl 90-20 vowed 


FORK FORA rev. •> uFs reunveo ' N 


V *•»>• v :<*x >:•:•>.*:•:.■'•<jx;:- vy< x \vv:'<•:•;• •}: % • 

a v\^ \ B'-Fov-i^v > W i>>x>v'>.N< >t\A\>Vw : x 


Pmeote/mvise/add Frivttey Act (eM3) statements lor related forms? Yu . defected):. 


| RECORDS, the program should consult with EMB to Identify/resolve any Federal reeerds/eJechofoo records Issues. 

| The system may contain Federal records whether or not it contains Pri vacy' Act requests oust is any event, a records 
f schedule approved by the national Archives and Records A d tihisnadeu is necesssoy. RMB can provide advice on. this 
| as veil us on compliance with require metUs for Electron ic R ccord ke opfog C ertif ication and any n ecessary updates. 

I Other: 



_jypd Uteri 

I Prtvaev and Civil Liberties Unit 


Deputy Geaeod Coan.se 
I FBi Privacy and CiviI liberties Offices" 


orgpatute: 
Date Signed 


Figstainre: 
Date Slutted 


Ij'NCLASSlFIRO 
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%A$mm 


f. Fr-ovide a general description of the m project AM Includes: (a) n a me of 

ilise evsletwpmlei^ istWiig associated scrnayaisi (bj structure of the 
systent/prpjeei, including istore 0 a««fi#ss wifi other projects or systs: m$% (of 
purpose of fir sysfehPpcpJeci: fd) satire of 
sal hew It will he used; (e) who will have 
fpfem/prolecf!; (!) ash the manner of transmission to all users 


is designed to provide users, primarily within the Security 


Division (SeoD}> ® integrated view of the Certi fication and A ccreditation {CScA} status 

Of the FBI’s Mhmmtnm technology (IT) assets._will provide management a 

more accurate east timely awareness of CJcA. activities; anti will also allow lor 
continuous nK>nl torio.g. v vnlnorahiMfy scanning, and risk posture assessment of FBI IT 
systems,. I kvill be the system repository tor ail documentation relating to the 


Gertifrealion and Accreditation process as defined by the Security Division. 

. . ... V • . ■ • ■ - •:• «?:: -V 


2. Docs die syslenkpmfccl collect; maintain, or disseminate any information about 
Indl vklmds (Le,, a human feeing or natural. person, regardless of nationa lity)? 

X HO |If »d, STQF, The F?A is hew complete and after division npprovaffyl 
should ho submitted to FBI OGC/FCLIJ .for final FBI approval. Unless yon arc 
otherwise advised, an FI A Is repaired,] Log-in information: and passwords are the only 
data, that are personally kientiCmfek and the privacy impact, is negligible. 

_ YES (If yes, please continue.,) 

3, Please indicate i f any of the following characteristics apply to the Information in the 
system aboth indivldnals: Bear In. mind that logics information: may identify or be 
linkable to an individual 

CCheck all that apply.) 

The information directly identities specific individuals. 


.he used, ineorpmetion with other data elements, 
to indirectly identify specific Individuals, 


_The fn.tb.rmation can. fee used to distinguish or trace an individual’s identity (is., it 

is linked or linkable to specific indi viduals). 

If ym marked any of the above., proceed to Question 4, 

_ None of the above. If none of the above., describe why the information does not. 

identify specific individuals either directly or indirectly, fit yon checked this item, 

ST OF here after providing ffee rep nested deserlptlemj 
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IlNCLASSFtEP 


■ tfet syfiem/ppteei isolate only to government eobltictotA or 


eoarnt* 


I, It .foformfofoo. aimot IMled Stoles ekkeits or lawful!I' iimlttocl p»wl resident 
aliens tArisvsd from the syslemippjeet by tsattte or other personal MPMiiet?' 


MCI Ilf skip to ppesilett ?,| 


YES, |If yet, proceed its the host ipesiiomf 


E, : Does the sysiete/prajeel oollect my Mhmmim 
sofeiect of the brformetfoo? 


n dlrectlv irottt the oeeott: with is the 


MO (If proceed to tpesikm f«| 


s, Does the systet?t/pt‘o|eet support admired, CT, or PCI Investigations or 


sssessmentsl 


YES (If yes* prc 


k Ate sirhfeets oOofhmmtioo Item whom the tttlomtthtott. is &gaity eelleelM 
provided a. written Privacy Act (e)(3) statement (either on. the collection form or via a 

<N>'sy/ 


YD |The program will need to work with FCLIJ to deyeiopfko piemen t 
the oteeesMr? htrtoDh! 


YES Identity toy forto% paper or aieeiro»le s peed to request aoeh 
information Item the information sokjeeft 


7, Are Social Security Numbers (SSNs) collected, maintained ot disseminated Item the 
systetn/ptoiect? Fell SENS stsooJd only he used ad identifiers in limited insinnees. 


YES If m cheek all that apple: 


I,. NCI ,ASSII A JJ 
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i INSERT C1>ASSIF1<:ATION/CONTROl, 
IFA.PPROFRIATE] 

SS'Ns ate important Jbr other reasons,. Peserlbet 


.The systean/pnieet pt&mss special p: 

vJxyx'* v v> \/yO Vi VWvt 


;vWvVVv5vxi vW vX> .i-N <> ^Vv^.f iWAvA ' v> v-vv v- 

.: table, or only available to certain 


.H iss -»«t feasible for the system/projeet' to provide spedal protection to 

SSNs. Biphde: 

Is the system operated by a contracted? 

Mo, 

.Yes. MbihaSoB systems operated by contractors for the FBI may he 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract blaeses that most be mduded to the event the system. 

00:5: yiOOOv x< 0 Ox-itvO iO xTjOXOO.O.OxOxOs x’TJ. 0?Ol •cOOx t O vOOX $ ITM^' OO 

•; v-yy ns>x xox*y¥ 0 <>.v* « <x$vy «#{•?><»• vyey* <vOaO TvSTSF■ \¥:0tK< x 

XT> £i A>.i> 3 xL\.>- yj;. •;? VA&TxVv.' pVxivA x VNAxAiSA*SA-vAviAoAxO V* A?A A vxXv 

> \AA\yxAx v'vF y >\ .-x i' V {' \ , \5 {X‘i>Nvs J tv^ v.' kcN sfifS/jy{•? ■•\ yx.*vy-<^-y->N .•'vtj.v.v- <0 oyAArO'jvyi »v. y>\ a 

V« v t,5.JVV x-Mv <F'-v YAVFAVIAaA O-OvXv.VsAvl >AAeO y?0 :A:\AO ■•' OO x>. AVAxOAjA-X AvNxA.AxA Jtvxxtiw. vjAv 

system for the FBI, 

Has the system. eobetgone Certification & Accred.tta.tima (C&A) by the FBI 
Seearity Division (SeeDf? 

MD 


If no, Indicate m 
completion date: 

mm; U 

fCMAi 

s pens 

flog, pn 

mtle »fid| 

it yes, please mdi 

date s;L 

c follow 

fog, i 

f known 

<: X 

Provide dote of Is 

tst CM 

,4 cerflf 

Ratio 

d/rmetr 

tltlcatioB: 

CAofMea tlohtf;: 

Low. 

Model 

Ate 

High 

Undefined 

Integrity^ __ 

_Low _ 

Mode 

rate _ 

Mllgiy 

^flilelltEted. 

Availability: 

Low 

Mode 

rate 

High 

Undefined 


• x V'V Av.' jy " y :: \xxycx <jB x>Vvx«: >:<> s>*5x> X’ $A*xA-* vA A.h^Ovt-.v.- 


IINSERT CLASSIFKIATIO A/COMTRHL MABMlKCRb 






















i tN|I IT €L ASNII'ICATI ON/CONTROL MARKING$, 


Does the svstem enndact data mininaas deiced in Section $04 of the 

:: ; . • •:■ v> 

of fee 9/1.1 Cowmmim Act of 200?, 9,1,. 
S3 {codified at 42 NSC 2CMMkt-3)? 

__ NO 

YES I?yes, please describe the date adding function: 
la this a national secmitY svstem (as determined b v the SecD>? 


(Id- 


NO 


States of Sptem/ Project: 

This is 8 new bysfeoi/ project is development, flf f&u cheeked lids block 
SI OF, The FT A A bow complete and after division npprovahN shad Id lie 
submitted to FBI OOC/FCLU far fed! Mil approval and determination if 
FI A and/or other ueibms are respired,) 


is x e >• o s ««m>» 


Sv.'.NvN \yw>;ff i'wK'XWi ca** y 7 : 

Sj:5\.i; i \V UV < Viv>pvA>: * 

as use system/project undergone any signitkaot changes since April 
NO [It no, proceed to next question (11,3), [ 




YES If yes, indicate which of (he following changes were involved: finark ail. 
eftaages that apply, and provide b rief explana tion for each osarEed chadgeTs 


_ A conversion from paper-based records to an electronic system. 

.^ A chan ge front reformation in a fennel, that Is anonymous or non-- 

IdeatlEahio to a format that is identifiable to particular htdlvithsala, 

A new use of ah IT systcm/prqlect, including application. of a new 
technology, that changes how information m mmiifmMe fbtm is omt/aged. 
(For example* a change ik|f would create a more open enysrorh|cct and/or 
avenue for exposure of data that previously did pot exist) 

,. . A change that results in inimillidi In identlhahle form being 

merged, centralised, or matched with other databases. 


ITCLASSIFICATION/CONTBOL 
IF AFFlf f fill A'I'll : 


4 ENIN fib: 











UNCLASSIFIED 


_ A new method of authenticating the use of and access to 

irdbrmatiott in Ideoiifmhls form by members of the public. 


_ A systematic mcorporanon ot databases ot information m 

identifiable form purchased or obtained from commercial or public sources. 

A new interaaencv use or shared anenev function that results in 
new uses or exchanges of information in identifiable form. 


A change that results in a new use or disclosure of information in 


Identiitahle form. 

A change that results in itew items of information in identifiable 


form be mg added into the system/prcaect. 

Changes do not Involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/proiect. 


s a PL4 for this sy standproject already exist? 
NO YES ; 


d yes: 


k Mas the system/prefect undergone any signs So ant changes since the Pi A? 
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ALL IH FORMAT IGI-J CONTAINED 
EEKEIB IS UHCLASSIEIEC EXCEPT 
ffiEBS: ISEMM OTHERWISE 
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ID) L INFORMATION ABOUT TOE SYSTEM / FROJEC 


(U) I, Provide a general description of the system or project that includes; (a) 
name of the system/project, including associated acronyms* (h) structure of the 
st’stesa/preject,in.duding intersommettoBs with other projects or'systems)'(«) 
purpose of the system/projeett .(d). nature of the information in the system/project 
and how it will he used) {«) who wilt have access, to the information- in the 
$ystenDprojeet| ft) anti the manner of fmmnim’wn to alt users. 



(U) 2, 'Does the system/projeef collect m 
individuals ffe* almoioo feemg or: natujwl 



or disseminate any information about 
regardless of Mttonality)-? 



EPIC-508 




ft'LL IMTORMATIGM CONrTftlNED 

HEBEIM IS UNCLASSIFIED 

DATE 10-29-2014 BY NSICG/C32W33B91 


[U&dbt&sifiedj 


(Equivalent is the DOJ ffiiiMt Privacy (IP A)} 

MMI OF SYSTEM. / PROJECT! Skaaffioki MvSte 


mm. 1M %!mqm Mmt IB; TIP 


DerBl4 Eroijj; 
.0§&$if$£d By; 
ReM&ss; 


l SYSTEM/PROJFCT FOC 


| NameC 


] 


| Pmgmm Office; 

| Division; Office af the Chief 
I Raowfedse Officer fOCICO) 


FBI OGOFCLC FOC 
Name: | 

Ph<M«; 


Iffiora Miaaber: ISSP 


[ 


] 


S x\\* v V'.Vv < ^ VVt > .t .^.vX A AV*' A; A V * \ 


FBI BI VISION INTERMEDIA I F APPROVALS (&>m 
lIMsba 

\ ft&psm. Maneger f« offiar a|>t>mptisie 
I executive m 


grata Divhasm; 
flasari: ffivskoss same; 


FB1IIQ; Division; 
Office of ih« Chief 
Knowledge Officer 
(OCKO) 


> .v.v V .v.^<A>»»v y^v- .vv-vv 

L?&$& * Sg£l&&v ^ IO 


me 


*5->;•».& v: > xjfrg'. r**s>s 

V w 1 - ■&«’**•': 

>'% , ■ > % .-. y, 

4-f*? S ,< •• v <:»- £;.*..: :. •:• 

•\R-VKS»V' WySvJ.'Vs+y \v» Ay .4 / 

Noras.:. BomOt R, Nixoe 

Sgecrk vbercoior to ita* Chari 
Knowledge Officer 


* sis ttevess&rv onasetmtA wltfo 
Division Privacy Officer 
Slmvote: 


ifkkvyliyxi'f 

State dgmk; 


Afer Ml ^spmvaB* .forward dg:«d fe&rd £&gy pta gt^rs&tcf. «|?r $<s FM 

0G€d*cw 

1.1 FBI; Pdv&cg Civil Lstetks Officers 4@$&g&iia$ tes*. aMsdlfoMS* .&pp:rag:sl 

•will fes recorded th& folfowkg p&p,) 

llgass fl&a! FBI. appr&v&F FBI OQC/FCLF will districts Mkws^ 

I - Sijped odgmal to Ilk I90-HiQ-C132i794 (Iwdt’O .JEM IB204 kmPA-520) 
Copks pxfofeMs plea* as sealed for Rmgram^Pmskm ile(4)F 


pdMdM&ifkdl 
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i INFORMATION' ABOUT THE S YSTEM / FEOIECT 

1 . Provide a gemtral description of ifeo system or project t&at inelntk«: name of th< 
systoM/projeet, foefotil&g stssodafetl acronyms; stroetnre of fee sysfom/projecfo 
purpose; nature of the mformatkm Is fee system and low It will fee used; svko will 
lave access to tfee ^formation In tie system muf fie nyaprser of transmission to at 
users, 

MySIfos will reside on FBfofBT, wM«h is FBIY interna! network, o» fee SteaPomt 
platform. MySiteh is a type of employee directory system feat copfetes employee seme, work 
address, position risk, gmde level work telephone number, work email address, eskgnsd puyee 
eommoapks of practice and interest,, general professional skills, language skills, edusatioual 
. history, job related trading, and other work related information. Sente of ike information in 
MvSites will cor.no fmm enistinu FBI systems. Aav directory infosraalfoo not already .mamtainc 


by t 

be FB 

!• ».. yO IsO 

other st 

is os; 

w<v| >■ -vyyv 

fee S; 

ystem b 

y dnai 

fowea ok a v 

pluut&ry b&ds. 

use 

••$ of 1 

dySite: 

iinayv 

iew direct: 

loto o'v 

iatioe 

about >: 

stber emp 

l.oyces for th 

e purpose of 


lit&fe; 

•g pro i 

•ssio&e! 

contacts I 

't etet'* 

p&rib 

=rm FBI 


td to bmte fit ^ 

:he FBlfo boskr 

pm 

foeas, 

fofon 

^.sdioa i 

is retrieve* 

1 from My 

lltes 

by eatp 

ley os aar 

am A& empi 

ioyov bare she 

i&bif; 

by to 

verify 

r-t \ >:*.’>• Vs-X*. 

i: most aft 

he employ 

ie'e ; 3 

>w& imf 

s*' > I'vfoUsfo* 

fo the dbxsets 

try sjiatent for 

SlCv'i. 

araejx 

Skills 

i Sttded 

ecatienal i 

mibrm&tfo 

A ffd; 

31 She B‘ 

w* 

^V -lviv)\V A Vi 1 

normal Map* 



(BPM$) will be in rend only format and must be edited through BFMS. For directory 
information not already maintained By the. FBI., employees will be provided wit- a Privacy Act 
notice, m respited by 5 U.S.C, | S52.a(e)(3}, at foe time of collection. FBI does not anticipate 
sharing information. contained within. MySites with individuals outside of the FBI, However, if 
FBI determines that sharing is necessary, FBI will share mformatlon In aeeooisncs with 5 U.S..C 
| 552s(b) of the tbivaey Act, whkh includes sharing in aceofoarscs wife any routine uses, a$ 
published in 0014)14, that are compatible with the purpose for which the information was 
collected, 

2, Does the sysfomtprojeet oolteot maintain, nr disseminate any Information about 
individuals In Me&rtfofofo foray, is,, Is information Hoiked: to or Mifeafele to specific 
individuals (which k ike definition of personally Identifiable fefemmflop (Fill)? 

_NO [If no, STOP, The FT A Is now complete ami after division approval^) 

sfeotdd be fofrniiitedf to FBI 0GC/FULU for final FBI approval Unless yon are 
otherwise advised, FI A is required,! 


% YES |if yds, nlease comirnrn.1 


3, Does the syster.n/project pertain only to 
OOMutfoOtS? 


pvemmeot employees, contractor^ <t 


>;: YES 


4. is information about United. States citizens or lawfully admitted permanent resident 
aliens retrieved from the sysfom/hroicot bv name or other notional identtiler? 


[Unclassified! 













EPIC-368 










llJodassiftedl 


b. Are subj^ete of information frosts whom fhe information is directly collected 
provided a written Privacy Act (e)(3) statement {either on tbs collection. form or vie a | 
separate notice)? 

M@ {Tire program: will need in workcwitb FCLli to rlewlop/impleoient 
Ae necessary ldrm(a),] 


YES Identify any Arms,, paper or electronic, used to request sock 
Afomtattoa from the information subject: The homepage for MySik 
will eoncbo aa {ej(3) codec dtalkd by the Prefect: Massogcr in conjunction w. 
guidance irons PCIXu 


7, Has Ae system undergone Cemftcaibn & Accreditation (C&A) by Ad FBI Security 
D:v;s; 0 i; (SccD)? 

x NO If ao, indicate reason; If C«SL4 is posidlog, provide anticipated 

C& A was peHbntied on SkaroPoisif 2007, which is Similar to the version of 
SharoPomt As! Ac developers anticipate will serve as Ae platform Or MySites, The 
security staff was notified of the SharePomi upgrade on MsrehY, 2010 and C&A is 
expected to fee completed "in late June 2010, 


YBS Ijf yes, provide date of last C&A eorfiOeotlon/re-ecoAileattoni 


Don't.know. 


S. Is Ais system/projeo! the subject of art OMB-300 budget submission? 


X MO 


Don’t know 


YES lifxm. please provide 


the date and pome or tide of Ae 
OMB submission: 


9. is tins i>nM S fas determined bv the SeeD>? 


X NO 


Doob, know 


Status of System/ project: 

_x lids ia a new system/ project in development, fff you cheeked Ais block* 

STOP, The PTA is now 1 complete and after division approvui(s) should he 
submitted A FBI OG€/FCLli for final FBI approval and determination if 
FlA and/or other actions are repuired.l 


fiActesiSedl 
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II, EXISTING SYSTEMS / PRO JECTS 


1. When was the symem/grofoc;. dev sloped? 


2, Has this system/projeci wtdergone any significant changes since April 


MO f If iso. proceed to next msestkm (0,31.1 


YES If yes, indicate which of the following changes were involved (mark all 
boxes that apply): 


A conversion from paper-based records to an electronic system. 


_ A change from fofonnabon in a format that it anonymous or non- 

identifiable to a fimmi drat is Identifiable to particular individuals. 

_ A new use of an IT system/projeci including application of a new 

technology* that changes how information, m. Identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist,) 


A change that, results in information in identifiable form being 
merged, centralised, or matched with other databases. 


A new method of autheatieating the use of and access to 
information in identifiable form by members of the public, 

A systematic incorporation of databases of foformation In 
identifiable form purchased or obtained from commercial or public sources. 

A new Interagency use or shared agency function that results in 
new uses or exchanges of Information in identifiable fom. 

A change that results fo a new use or disclosure of information in 
Identifiable form, 

__ A change that results k new item# of kformstkm in Identifiable | 

form befog, added into the system/project. 

._ Changes do not involve a change fo foe type of records maintained, 

the individuals on whom records are mafotamed, or the one or 
dissemination of information from foe system/projeet, 

h Ofoer IFrevitle brief explaaattonll 


llluciasslfedi 
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I Unclassified! 


3, Does a PIA for this sysfoadprojaet already exist 1 


NO 


y |s Sj 


n yes: 


a. Provide date/tlile of tfee PIAr 


k Has fee systenbprojeci undergone any signi/IoMl ehaogns since the PIA? 


NO 


YES 


|Tbc FTA, Is mm -complete a»<J after division apprevaifo) sMonld foe submitted to 
FBI OOC/POI.AJ for final FBI approval and detersnlnatfsM If FlA and/or older 
actions arc reqtdreti! 


I Unclassified! 
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ALL lHWOBm,Tim CGETTMNEC 

EDEEBUf IS UNCLASSIFIED 

DATE 10-11!!2014 BY N3IOG/C32W33BS1 





































































!, Provide a of the iwfei «r project that ittehtdies: (a) name of 

the systemiprejeeh including associated acronyms; ft?) structure of tie 
sysiete/projeeh iwehsdioi mtammmztmm with other projects or systemst (c) 
purpose of the systesseprejeet; it!) ttatore of the kforteaihttt in the system/projeet 
and hew it will he eeeth (el who wilt here access to the .ht Cremation m the 
wyetem/prejeeit t|t atttl the omotter of treosoriesh/e to all owes, 

el dame of the svateoEproieeh ittehmiop a-moebOed aerapyms 


P :T \;*< PKoY YpVvpsp PpYvTpdOTy. ’iPVsT-S 1 ' 

•x-.i-xsO .V x ■::■> V.b- v .5x»«' -O*-v-vv^x-V-w x.y'x.w: -v.Vi-. V-'Vy :*. ■■» .-v-Vy >.. 

fVPPP CP)iV 7 lid PPppdpplpi PPIPrPPd. p\ iKp PP: 

SharePoaO e/w : h’ea'aeeets wa/ha the hOiRhi Orei/tve e 


tabbed bektw. 


"(tf Strpeia.re of the syMetp/preJeelv ioeiptllog interconnections wtlh hfhor |p/pjeej;a 
or ipelietlh 


The Enterprise Ehaklhllpi EMhleehdfpop Is h Ephfhhoiht: hhtPwlh IE Wits 
that usee Microsoft SOIL Reeces he. Its database system within the FBI SECRET 

f p wp/pl p.' y V ppwd YT/vvtO-vy'yv P yyyyypyvy\ o K'i.t s-Nsyw't; .tvi-yp >p yt Pd y;v.>y*>;p' 2:vktP Pb.TpbS 

v V yd IkfsNi.. X :* x jRa odd ts-evy.h .t bs.dxp Ox\'Pv : C\> . id: y : :O V>.! v : :;t(E: \p> : P>P\bPV VV'Va' P SSfcvVX p;'x>:*V- 

t’l-'f'SjvvsdW'' Pv>\-'\> ; pxaS 5 ; P>P txyh'>:<:j:;S';r \y\sS>S P jv;-N > •*>,<•; J- yY aAWp.Jpyyey <yp\'<>V:>ao;. 'Pyw aPey-v 

...;*■ ' v.*.. . ..x.x-.*v:” •••*. . 

Yyyy^dyvxP yy<7 *Vi}‘ '■ yvc:'.'**: v^Cx'f'pjps-vyS:SySfpvyl Ppxydr•>VScSy: V : >:><y«r. ; :<>vy 



11 WcO Service^ S^opof' $ (WSiSlP p^typpp y ip'\ Ov <:y y Pypypp p pi ppvtppp'pt 

prodaeibe.tOJsab.Ohy PharePoaa 2007/2010; SharePobn 2007/2010 paaiaetioo 

f (I v'n'Ck'nCjlt' Pp'w’ e ' 0 0 p’C > I d • pi" V d'ld'dOyV ;'2':2p S-PiplpOp'lp e 0>P " PI t p' 

Continuity of Oecret/ons tCOOP 1 environment., 

1 hy i I P p eer< : PyPpI P P E?/ PV7 P •wv\y;p--.'Nee^N-yv>y>p Vv ett'Tppilv \ w r>'t ; .n p y,N .2 ;vv.-N^ i v;ivw < .-pi 

A >iv >. Vl Vp;i-Ve>sv*V S0v\\'P-'•.>i: : >:0S E-pdPdk-Vyx> xlp\vpCsCvp>: 

^s,y \yy;-x>\ .;pyewy.y-p-. .-xyx.d; } \>>ii^vr yel'I-y^ •■••iy . <> cs.-dp;' 'j : fS:¥‘Nvyi/>: \^yy;e'>S.f:< : y<''*;S-:y f loiow;: 

./>\;vp v\ >0 vs:' ri s.h.vs v t\t ov sO V; p \ ' v 7y.|7 v\ ; v.v'hO.v v2wa>: 7> :\V:p/w■■>. t ey.v.vyp 20. svV-:>-.'->>'-.S- : >.-v y kvy h 

: 2nO' : fk\yp T pf V peyE;:< Kyvy> < :: 2 ' S' r• ^ :'YevP>0 ,'\y; ' ; ys-i\ yy;] yys yvyyv-y ^ 

.y.^yyyyyJY YXA V>>V :>--d y:>.V>-<-y\--<y>-;>-. : 0 : vU v 0 . «..\C>Wvv vx\ V Vi 


■.eP-At. • >->x<i%Vv.::.ydv: :v^.: E'yv N .iV: ^.;>xc v;>: y.<yv: v>.i::sV«. v.i Y-\.:: v Va.>. sPr-xeyd:>k> exc x v>."0:\:v>v.>0\y'T: yS.vvd.' v.x yOy'AE 


W :0 :;> , 


.;4 Pi:?: PiPpnpPPiPpp'i $1 -ii. p;y. 

itt m&mti <m PP/lpsiptNd Ii.& P ppp 

ptkp .pTywdpyp hlOPPPpP plffiPriP yT rypfpl ipytyp i siylys-y pltyiy. pydwppw 
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For the SherefNsIsst Pre~fsro4uefsoss 
syxtesre development staib h'BI prof 

Xty Ml .:.>cMA pv v'tSh yv b’Xht s vc.:. 


V :-X v\ N\ -e • , <■• .v N-e eh:.; ' ■• •.■:• vy •■ - syy.;.--.<'v" y 
t.Vy : n :<'>:y>.f,\: b: t Ox e\^h'-.e' '•>:*:>>> v x> T yW^xtexe: 


R^c^verv Fi$ ^avirNai m are • 




:■>•>«>•■>:• :\x> {> vav.vJNv s • 
y.'V.v vJ V> ; vV X>V Xv> 

•''x^vhc'^dh^S^'-hatxr-Sv'h^p'X-hy'vX:':-;'-: x : thv^x^Xptt>hex : ; : A;'>::: : X^h-;y : -'S:: 

<xW > \ . .< \ V .W t •;. -Xv-t >..\:v .-• : : x v\-.v\NSU- 


V '.K.Vuhtx^vU '' M •..':v •. > V XbvbM .-. A.Txl\.hMts> livVvxV he 


The Conttssesty of Opessstsesss esse boos suets t is eniy accessible by she SyyTm 

••V - X %-v\ \ <\\ X< n'' v -n ''' v ' : ;VX*v.'f>:- 
:>x >x',\*;v>:i.p:5p txx^s xV.fixx T-Xvsxbdx 

ft The easterner ef S:s v asseestsNo?s its ell usees 

I ? to.ussNeTa e;' T-- s«! t;ee e\' yt ''T eel V: \eO ! I be-'S,\x oT x ■- x e; T- 
tesiupy I'roauciiim. Keenvery sens - see \ t s c ost' e^s'et-xee ss etr-'eye tunc? 
hstereei Explorer or btsvdks I iretbs. oss the Secret I ecksve tss t BIN ; I only 

J, Bees the sy§s csss/p reject collect, sssassstem, or sJNsessssssate ssssv mftitmMim ebetti 
ledlstklnstls (Le,. a hsssssssss tsema or stature! persses, rsaardless of mdses assff Set? 


N.:TV 
.*. N' T 


A YmA I b^wifver. Ac A Ma 

s \s\v:y:,'\r. .-\t J\x- \ .T ,-v; n Ns X \ •vKt - > .y.s-vy ,-\ yv; vv.'N :\ <> 
;v\b\se;bve:e;b\Nxex\^yibsT;b\Txxt;Txt\ 


y::-:%5:c \ : s y' tS'S' :v - tsf 
•>.• > ' N> :> >• s. ; -s v.-: x-:,\ 


Vtebxyysx x-.:•••-s..'■; : 'f s f ; ' : 'bf''V V v • J '• J ; m?vf Nf'f' 


3 . Blease isssbeate st assy of the Cobmsbss? eisasasetersstses apply to the ksforsssatssm so 
the system abosk latftv klosls:: Bear so ssskssf fat Team ksfmess a tom may islets lily er 
be lit kefs Is to ass ksdfrJxfaal 
(Oseek all fbsst epplyf 


: x'K .X v^Ar^V 'Ni b'- vjb eN vcv.v.-xb f i A<:y :r-->s'X':N : :N x ' : i ;> 


x 


.yne mfopsrefsou Is ostepOpTfe he;sl|ciy;:tpC:pn|sspctsoii svPlppIberdtpeNioiifl 

.UdO.U’ vCii'N .KlC'HU j V s>i;vCiIi.C .IT^Oi’Vlilxbsbax, 


^ l^'b vTSS'VP ;vt xyvt *••;<.. .;c<N.y t ; yt : •■'• >p x :• y y? -:r-y t •• j x-••'C ' x \ xt xox < ;T v: 

v .> x . v.' . . sxst\.> .. V V ve.v - • <• '-.'bv\S :.•<•• ss;TvA:Tv\v>b.v: V :• vx:\>f V.v\ts:T,' :\s xx >\.y>. < 

v\ ' > vM\ A* V s * y^!\" * > S > V* A A N J .Vv \ •!> ib.X'V*! ''<• •'V v - V /- ^ v s ' A -!' V , '‘s'v V V*' ' • ^r'.-^x... ...... ..... ..... ..... ..... ..... ..... ...... ..x.xx... 

. \s> . Ms .v Ms*: \y\*:« > Ms > : x> vs v ’ A M O * v >>- v v .< v s .v : s v A .s >.s; : :: v v 


vf vTb^N T^ThN''MbTN V ys b ^ A MbM! V<y^ x x s'ycxsx $ 

c s > \>y.\ y.vycyy ^\\.y. x <x>c > >> >. yp.xv 'Tb> s > \ <• \N vsx.XTfxe bx T v 














S. Is in f o no oik ns khotsS Yoked Stoles esi.deos or tewdsite pdoeltted permanent 
resident aliens retricved front the sysSetpiproJeef by s« or ether persopat 
tdesttlflef? 

NO. flf no* skip to qoesSoo ? v | 

_J1P,F" nS, Pf yes* prpeeed to ik® ?^s:r p:p®siks?-p;! 

S, Does the system/projeet eoOeet say iotoeatef Jett sieeetiy from the person mb® is 
the s o tsf eel of t h e htformadon? 

NO pf ore. proeeed to tptesdoo. 7,f 

..... J....... : 'FihS 

a, Bees the eystetBO^pset seppert eriteteek C .17 or IX;I dn esttpaSons or 
assessments? 

NC) 

..X XIIS f If yep proceed 1st: tf sseatf ots: ?,f 

hv Are vobjeetv of Itdorotofieo teem wit tee the tofernratteo Is dhecdv 
collected provided a written drivers Act (e)fo) statement (either see the eoheetiotr 
forte or vie a separate aofiee)7 

Nt) |The proprom will need to seertessdb IXd.l to deevlep/insplenserd 
the necessary !bret(s).| 

K YEN Identity sate fortes, oaper or eleef renk, psed to reqoesf snch 
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Is I|f system o|krbfNl by & eoalr&vtfrr? 


X No. 


\ $*& OvY'Y'Y:Y >> :<<xVs OXN'^V'-'y <M";< : 0':^: : -'i Kv; <V;'Ny;,ybv-v ;a;> vNy-:v X Fl i YVYYY'O V<& 

'-V\ *'«A yA; A;» .y \>\V.vA >A> A >. v*A ; -v. . v> \\•, > v,'.y> .\.v ^y.> v V.VvVa a; V * > \«>.■>;> v>• vavV! S:><?>•> ; v X-\>* Y • v S V ^ X > > s v;^%v > s a \. 

X'Yxy xYY >n x N v> roY A ; b ; yv : s n y v-:. <\ .n >>.N . ; > \ Yv.-x YxYYv \ . ; x . ; x lx :>xv \Xx XvxvY .-SY 

sox.-v\.\: > A V Vax v A A N Y Yv:a Y...X \> x Y x- \ • x x-xYx Y x: v; Y A-YN-.i <YY X x x- Y x-.' a-Ny xxYY Y ;Y <Xs xyoY Y v: v.vYx 

.As asxX x\ a v 'a O. xYY'.Ya'XsY ■•x %"•••' y;';v;Yj-Avb v'l'X'lX'Av' Yl-Oxi' y >\ 'Y :: Y :'•'ox \ <n x< > .Ncy-: \ yX\. Y ' v.;: x-v< : .v>y,;Y x o-:> vN'vl^'T' 

Vy.kYxvxYxxY ; Ys-\sx:X s'-\n-x x%'- 'x x. Y a: Y xax- x Xs .•<\YssYx-xY : Y:•.<-> x Yx.'Y xA x ox. : a>xyx%x YY •:•>;>• x:YN- x x.VYxx: x: YY . • xxYx V:: Yx 

collect mo.-M looJ's .ox ovo:•> s'-'. roqoiroou . oy b 

liiillll ll I §tii§i II |iiiiii|:i 11111111 iiiii. iiiiiiiiiii iiii ill 
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system for tbs FBI 

Oas tbe system Certifies turn & Acembtotlos IC&A) by lbs Fill 

lUlpIpIy lllylilssp.. (Set III? 

.NO If ms, bulloue reesoeq If ON A K pselloy petmde smkspetetl 

iiiiliiiiiiiiiii 

X ill IfNiN illlill liiillll ill iillillH If iloFll? 
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Prevhie date affasi CS:A 


\ x - ' ■ , ( ,A \ \ \ •,. '. . \ ' V '\ \' ' 

The ISPNET (.'P A was renewed Mar oh ! 4 , 20 . 12 . 

&4>.S¥ . YtehprSte .. A MSgiSS (j pACtSACA 

Integrity:: .lam YteherAte X Mhth UmldiEe# 

AvAhatAhA: hAse PlapAram A 114(1' 4 Adefns.ed 


No; apphcabse •• this svstem is opN oapcp-booN 


II#« the system «»mfdet Reis pihtlkghs iteflneh Ih Seethm mH ni. the 
ItSplemkkfihi Uetnmmend'M'mm of the ||| 1 Cimmmkm Act of 2IM4'7. : 
| Hill llillll || 42 lull lllllllll 




Y ES If ve.Sv please describe the data mkneg hmtihmi 

1, Is this A AAthMht heen.rRv sestem {as tleterlRhkht hv the SeeDV? 


a 


'A : 


L States of S ? s tern/. I s re t re k 




I- When was the system/projeet tlepelhpetl’f 2004 

2. Ilhs the systeM/pfejeet emlergeee any slgotflcaet ehahges share April 1 a 20IIS4 
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FINAL 

FBI 

U>FR0YAL/J 

DETERMINATION 

S / CONBITlONSt iftds s 

eMStiO; 

S SOI Hi St 

empleierl by the Pitt 

of 

:P- 

FOX 

NMlawIndFfd 

IMF 

TA simitar strdatd stop, to 

Shoo 

eat pays o 

od «««*| 


_ FIA1$ tecptred by tht- IMIdvetorbeot Ax 

_FIA is to fee o»gtos<! as & matter of FBt/DCXi discretion. 

Is. FIA to be otMtsheb m FBLGC3Y (bites aay HMD PQtA fedaetiens)?_Yes, 


Mo (indicate reason): 


BA is not reported lbs tie following reason(s): 

System does not collect, maintain, or disseminate P1.L 


\s $ %->VV.v >. :• \iV\v.;? \ A \v V. v\v>oNvV' >A v^x »W AVAWrfvy.VAfrA^M^w.. ^ a a < 

__System Is grsedlltdserodo'ltrsxlsleooe before 4/17121103; no latm changes posing slgiritleatd privacy risk 

lolbmtdtioe in tbe system relates to iotenmi government operations, 

__ System has been previously assessed under so evaluation similar to a PI A. 

_ .Ho-significant privacy issues (or privacy issues ere unchanged), 

JL Ether (deserthe): Neg.%1b.le privacy concerns as only log-lo information is contained in the appilcador 





























































Unclassified // Fui>€ 


ON ABOUT THE SYSTEM / 

1 . Provide a general. deseriftko* of the zy$imfa «r profeet that tstetpdes; {%) 



system/projeet,. Including lotereermeetionx with Otter project or systems; fe> 
purpose of the sysiemlgro Jeci; |d) mature of the information in the sysiemlprojeet 
and hm It; will lye used; (ef wfto will texe geeess to the fofortuation :m the 
yystem/prejecti f t) and tte manner of tnmsMlssloo ta all users. 


is a comrnereiaholimhe-shelf (COTS) software prodtrctflby 


mr 


psxqeet lilteyele .femnt temeht it Is need In: system rednlremenm collectio n and 


management; mappmg|_pats to 

mqoirametns; tmmim®ksg correction/deleol; lists; and display ing: mtop ated dasdPoarde 
stewing pr oject health' sohedpl.es,. and status tnforrnatlon. (A l I nssesstnoot of 
hm hem. successfully oompletel) 


Only tokifotatton necessary for project management will be retained, by tb 
software tool. The only personally identifiable infor mation (PIT) t hat will be stored in the 
system consists of the login names and real names of_ 


employees and commuters), Mo operational or field, data fkmt arty of the systems: that 
may support (Inaiming 


wtU fee oroeesaed. ov or stored m 


users (ue,, rldt 
m: 

systems! 


TV 

x S t y. 


isftswe will 

iN-^s^C- 2, <*<n 

v:S$:i vxSx- v>i x 

i 




_ 


I i&Vi . > V X 5a vxcxVA- WivX-Vi:*.' vvXOV v V a.s i :itv v 

re.sk 

Je with 

in tire security aca 

rvd'vinti.on 

| 

oundaries of | 



I 

eli 


i If o 

.-in n^n wnn t? 

• Ai »v I vy i s.W vi 

it bounders 

? of and be ac 

nredlted under 


The 


software will rely on the 


for loam authentication. 



1 


Iwillha 

vn ac* 

to live data in the system. Arn 

systmtso 

fteare adntmistratorsoftlM; 


SOdW; 

we will he a stuall subset of the 


same group of persons, Tim system will be nm on FBI-owned equipment within the 


FBFs[_ 

of the system. 


] FBI contractors, may assist in the Installation, and/or operations 
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Un&iassmea HkX 



X Does the sysiemdprojeet collect. nmlntaln, -m owsemmate any mformattoo about 
individuals (Le., a human feeing; or natural person, mgardkss: of nationality-fo 

_X ftO ft? nty SYCilh The FTA Is now complete nod oiler division 
agprevaffsjt slmdld he submitted. te fill OCIOFCLU for limb. fill 
approval, Unless you are otherwise advised, p.e KIA k repalrefol The only 
1 information. that directly identifies a specific Individual consists of 
Information necessary to establish. a login account, he,,. first and last name of 
account holder,, and login pseudonym, as copied from directly than the 
Bureau"s centra! Active Directory, 


YES fit yea,, please continue,| 


3 , Please Indicate if any of the following characteristics apply to the Information is 
system shout individuals:: Bear in mind that log-on Information may identify or he 
linkable to an tndi vldual 
I Cfe&ck Eli tb.Et as>p|y,) 


The information directly Identifies specllio Individuals, 
1'he information is intended to be used, in eonfdnofion wit 
to indirectly Identltv specibo individuals. 




The iuformaiion can he used to distinguish or tree 
is linked, or linkable to specific todividoalsh 


:.-s an individual^ Identity' (he. 


If you marked any of the above, proceed to fjimaffoo 4, 

None of the: shove, If none of the above, describe why the iofonnatioo. does i 
identify specific individuals either directly or indirectly, fit yon cheeked t;hi vlteng 
dl'CIP hero after providing the respected descrlptlou,| 

4, Does the systenUprcsJect pertain only to government. empktyees, cooiraefors, or 

COESultaEltS? 


5, Is information about United mates citizens or lawfully admitted permanent resident 
aliens retrieved Bom the systeto/pip|ect by name or other personal identifier? 

NO, |lf no, skip fopuestiba ?,| 


¥ES, flf yes, proceed to the nest puestfopd 
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1 Joelossified // rO i l£p 


4, Does the sysieroigtojeot collect any m 




t tne oersoa who ;s me 


MO fit **% proceed to «|tto$fte*i 7.J 


a. Does, the sysferrdoroteoi support' criminal, CT y or FQ bwesdiarkms 


tsssssmenss/ 


¥ES |If yes, proceed to poesdoo 


to Are subjects of Inllmnaiton Irom whom the ; hrfemiattop it direedy collected 
provided a written Fromey Act (e)(3) statement (either m the collection form or via a 
separate notice)? 


MO (The program will need to work with PCLIJ to develap/b 
the necessary forarfsTI 


YES Jstotdify a ay formes paper or electronic* used to request sack 


In formation fro so t he i a tbrioadoo subject; 


?>: Are Social Security .Mtonhers (SANs) collected, mmnirntmd or disseminated from the 
ststoudtoofeef? Foil SSMs should only be used at idooiifkrs in limited instances. 




.SSMs are necessary to ettoblistdeoslirm the Identity of subjec ts, victims. 

witnesses or sources In this law enfescemeot or iutolFtoee.ee activity. 


SSNs are necessary to Identify FBI personnel in. this Internal adroimslrative 




Is are important tor ether reasons. Describe:; 


_The syatem/prplect provides special protection to SSNs (e,g,, SSNs are 

tneryptod, hidden from all users via a look-op table, or only available to certain 


users I. 
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Unclassified tl 


is not feasible for tlie sfatei-n/preleet to provide special protection to 


SIMs. 




Is fie system operated by a. otmimelof 


.Yes. Infestation systems operated by cooimoloto tor tile FBI may la 

considered Privacy Act systems of tyeoidA The Federal Acqnisitieo Regulation 
contains standard, contract ciaoscs that mast, be included in the event the system 
collects, maintains or disseminates HI and additional requirements may be 
Imposed as a metier of Deportment of losilee policy. Consnltaflons will tie 
Office of the General Counsel .may be required if a contractor is operating the 
system for the FBI 

Tlas the system: undergone Cemticatkm. R Accreditation (C&A) by the FBI 
Security Division (SeeDff 


MO If ®% indicate reason? If €&& Is pending^ provide anticipator 
completion date: 


YES If yds, please Indicate tie Mlowteg* if fcowdt 


Provide date of last CM%A eerilfleatloe/re^eertilleation t 


Con Idee d allty: Low_Moderate_Iltii Undefined 

lotemify; Low Moderate High Undefined 


Avpliility; Low Moderate filets Undefined 


Mot applicable -this system. is only paper-based. 


t/nclessiiled 1/ FOfjD 


EPIC-283 



















Does foe system conduct. data mmn% m defined m Section S€4 of the 
: :fotpIamerfoog Reeommmdadons of id# 9/1! Commission Act of 2007, 
53 (codified at 42 DSC 2{fCK>ee-37? 

_MO 

a this a national security system (as determined by the Seel))? 

MO YES 


States of System/ Project: 

This is a new system/ project in development. |lf yon cheeked this Mock, 
STOP, The FT A is »s» complete awl after division apgrovat(s) should be 
mfenfoied to FBI OC«C.7PO.,CI lor final Fill approval and determination If 
PM, and/or other actions ere reqfored,f 


hen wm the systern/prq|ect developed?;:: 

d the system/project undergone any significant changes since Apfi 
/NO [if no, proceed to next question (IL3),J 


IdC 


YES If yes, indicate which of the following changes were involved (mark all 
ekantps fiat apply, and provide brkf eiplanatlon .for each marked change 

A conversion from oaner-based records to an. electronic system, 


A change from information m a format that m anonymous or non- 
identifiable to a format that is identidahle to particular Individuals, 

__ A new use of an. IT sysletn/prqjeei, including application, of a new 

technology, that changes how iofearaation in identifiable form is managed. 
(For example, a change that would create a more open emdronmeiit and/or 
avenue for exposure of data that previously did mi exist) 

A change that results in Information In idendfldbie form being 
m erged, centm lined, or matched with other databases. 















_ A new method, of authm&atlng the use of and access to 

iolbrmatkm in kfoniifkbk toon fey members of the public* 

A systematic irwotfmmtion of databases of mformaiipn is. 
identifiable form purchased or obtained from commercial or public sources, 

.°S. v> <•>*>:.' ■{ jA^Nmy'Siani j wo o ,--vv' .'VJ-vx.A .' Ess mt' v ''wuwv ■i-'ACNiCl v •; vS. 

£> .t $&•:*> &.*$«$* O.V i : V\i v&gViAV V $. i A^X U>^i- i 

new uses or exchanges of infommiion in identifiable form, 

A change that results in a new use or disclosure of information in 
identifiable form, 

__ A change that results in new Items of information m Identifiable 

form being added into the svsiem/proleet 

_ Changes do not invol ve a change m the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the sysiem/projeet. 


3 , Docs a F1A for this svsteopferokst already exist'? 


<\<V/ 


Ifyesi 


a, Provide dafddftte of tie FJA: 


h. lias the system/prfoect undergone any significant changes since the PIA? 
NO YES 


fFhe FFA is now complete and. after division apprtwal(s| should he s o Implied fo 
Elf.I CMfCVPC'Lli for final Fill approval and deierusirmthm If FI A and/or other 
actions are rooaired, I 
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ftLL IMfORM&TIGM CaNrTMNlD 

HSBEIM IS UNCLASSIFIED 

DATE 10-2S-2014 BY NSICG/C32W33BS1 



(OGC/PCLU (Rev. 04/01/2011) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 


NAME OF SYSTEM / PROJECT: 


BIKR FBI Unique Asset ID: _ 

N/A 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Reason: 

Name: IO^J 

Name: AGd 

Program Office: 

Phone: 

Declassify On: 

Division: St. Louis Field Office 

Phone: 

Room Number: | 

Room Number: 7350 JEH 


FBI DIVISION INTERMEDIATE APPROVALS [complete as necessary consonant with 
Division policy]_____ 



J--- 

Program Manager (or other appropriate 
executive as Division determine^) 

Division Privacy Officer 

Program Division: 

Sianaturel 

Signature: (jj 5 

St. Louis Field Office 

Date signed: (j/ 

Date signed: / c//3/1 3> 


Nameu 1 

Name: SSA Craig Severson 


Title: Supervisory Operations Specialist 

Title: Chief Division Counsel 

FBIHQ Division: 

Signatures 

Signature: 

[insert division name] 

Date signed: 

Date signed: 


Name: 

Name: 


Title: 

Title: 


After all division approvals, forward signed hard copy plus electronic copy to FBI 
OGC/PCLU (JEH 7350). 

(The FBI Privacy and Civil Liberties Officer's determinations, conditions, and/or final approval 
will be recorded on the following page.) 
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UNCLASSIFIED//FOR OF! 


JNLY 


FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


_PIA is required by the E-Govemment Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _X_ No: No PIA is required. 

X PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PI1. 

__ System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 
X Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

No significant privacy for nnvnt”v i^no^ miv | 

_Other (describe): 


Applicable SORN(s): FBI Central Records System. DQJ/FBI-002. 63 Fed. Reg. 8671 (Teb. 20. 1998), as amended 
bv 66 Fed. Reg. 17200 /Mar. 29. 20011 and 66 Fed. Reg. 29994 /June 4. 2001).__ 


Notify FBI RMD/RIDS per MIOG 190.2.3? _X_ No _Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? X No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? 


Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


_|Unit Chief 

Privacy and Civil Liberties Unit _ 

_Deputy General Counsel 

FBI Privacy and Civil Liberties Officer 


Signature: 
Date Signed: 
Signature: 
Date Signed: 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 


The National Archives and Records Administration (NARA) Military Records 
Center (MRC), located in St. Louis, Missouri, houses military personnel records of 
individuals who formerly served in the four major branches of the Armed Forces. The St. 
Louis Division (SL) therefore covers a large number of leads received each year from 
FBIHQ, field offices, and CJIS seeking to verify the military service information of 
several categories of individuals, such as persons of investigative interest, applicants for 
federal employment, and persons seeking to purchase a firearm. 


In order to more effi ciently cover militar y service leads, several SL Investigative 


Operations Analysts (10As) 


Upon receiving a lead, these 10A’s query 


NARA databases to identity relevant military records and to electronically request 
retrieval of the corresponding service personnel folders by NARA personnel. The 10As 
review the folders after retrieval and prepare a response to the lead, typically in the form 
of an EC or report, which may include copies of relevant documents) such as a court 
martial judgment or dishonorable discharge. The response is uploaded into the 
Automated Case Support System (ACS) and the original personnel folder is returned to 
NARA personnel. 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person, regardless of nationality)? 


UNCLASSIFIED//FOR 


LY 


EPIC-288 





UNCLASSIFIED/^ORSEEIGt3«5^EllNL^ 


_NO 

X YES [If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

X The information directly identifies specific individuals. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

X The information can be used to distinguish or trace an individual’s identity (i.e., it 
is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

X NO _YES 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7.] 

X YES [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO [If no, proceed to question 7.] 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


NO 


UN CL ASSIFIED//FOR () 


ONLY 



UNCLASSIFIED//FO; 


ONLY 


_YES [If yes, proceed to question 7.] 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

NO [The program will need to work with PCLU to develop/implement 
the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

_NO X YES If yes, check all that apply: 

X SSNs are necessary to establish/confirm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 


_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor 
X No. 


_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 
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UNCLASSIFIED//FOR 
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NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

1 b7E 


_YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 

Confidentiality:_Low Moderate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _Low Moderate High Undefined 

_Not applicable - this system is only paper-based. 

10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X NO 

_YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

X NO _YES 

12. Status of System/ Proj ect: 

_ This is a new system/ project in development. [If you checked this block, 

STOP. The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PIA and/or other actions are required.] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the sy stem/proj ect developed? 

I 

2. Has the system/project undergone any significant changes since April 17, 2003? 
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X NO [If no, proceed to next question (II.3).] 


_ YES If yes, indicate which of the following changes were involved (mark all 

changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 

_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PI A for this system/project already exist? 

X NO __ YES 

If yes: 
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ONLY 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO _YES 

[The PTA is now complete and after division approval(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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ALL IMFOKM&TIQN CONTAINED 

HEBE HI IS UNCLASSIFIED 

DATE 10 - 23-2014 BY N 5 ICG/C 32 W 33 B 91 


(ckicpclo msd Afitimi 


Fill PRIV 4 / "' v 

(Bgetosfmt to the DOI Initial. Wwy (IPA)) 

NAME Of SYSTEM / FHOJECT; Strategy Mmzg&mmi Too! (SMI) 


Bfs 


SYST 1MPMMECT FOC 
Name: I I 

Ptosnuu Olfke; Strategy Mamtpmeto \ !%ooa 
Oflke (SMC)} 

Dmstoo:: Dimeters Office (DO) 


i fm c >cc(FCfco roc 

I R&me: 


| Boom MumRc 73 Si 


I Eoom RtoAlefi IIO ffip Alii 


FBI MVMI0N lAYEEM FiPIATl AFBROVAlA ieompMc as ;em;ewar y aaa«<»»a»$ wtto. IFtolsIoP. p olicy j 
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fecladiag associated acronyms; (hi stroetore of 

■Cr peeleeis m systems 

SC 

'$*****’' ^ ^Sll !&** **'«&£$* ■$■&%:■ 

Information m file sysrem/projeett if) and the m»»er ef tre^tpliii#|| to til 
oserw 


The pmpose of the Strategy Management Ikol (SMT) protect owned by the ihlreocofT 
Office (DO)/Besoaree Planning Office (SP0), is fs)4s¥el«ip g technical soltdlon. to 
support tbemitiiieiBeot of.the FBI's Sostegy Miosgpoiottf .byBt^k.CSMB)> 

SMS Is a strategic plaanina ocoeess currently bdtag inmkmeoted thmogfeooi the FBI. 
Priorities are developed at.the Enterprise, Brandy and Division keels arid their these 
entitles track arid review perfonnmme apied: achieving those prforhiei m a 

ooarteffe basis, This Is achieved ioidil tire Balanced Scorecard methodology, which 
includes conduct of regular strategy review' meetings and the compilation of data reports 
that are need, to 'facilitate the hest tlloeatloo of msotttces lor resolving critical 
performance issues. 

Hie SMT project wii provide the FBI. with an eoterprisewtendard tnfhrtnaiitm tool to 
standardise this process, end allow oserFUivisiona/branehea to manage their respective 
SMS programs ihtoogh. a one-stop shop for all sfeategy-celaied Items. By creating an 
enterprise standard information tool, the SMT project will allow the FBI to suggest the 
varying capabilities necessary for SMS success by Introducing a range of processes, 
rtdes, sfondsrds, protocols, and best practices associated with the Balanced Seoreeard 
methodology; which will facilitate common SMS stsaae across the FBI.. 


Use of SMT will he limited to only FBI personnel and nfolntrked cooftaet personnel. 
Users will, access SMT throngh a wefefoased oser thterlhee, nvmlahk via t PBIfelei !og~m, 
fefo separate naemnme or password, independent of FlIIKct will he necessary. Access will 
he controlled by iodivldnal divlsiofofemecl cootdlnaforf wfeo can. grant madwwite or 
read-only access to approved personnel, as apfmspBate.: Any revisions fey a oaerlo 
inlbrmnioo emstaiaed within the SMT will he mflcetad In a. change log. That log Is 
visible to all divlsfonforaneh eootdinafors and SMS objective facilitators. 

Dlvision/teaneh coordinators will also determine wikiha? other di visions or braoefesa 
may fee panted access to their raspcctis?e SMT paps. Cither than those specifically 
amhonned by the coordinators, only the I&ectpp select Dlreciork Office skll; and SMO 
staff (tor management purposes) will, have access to ail information contained m the 
various division pages. 









Information. eonfoined wiflfn the SMT mi! relate to mission soppe ml pBrnadly cfpslsi 
of o two that! ve data .measures* although seme qtMliative ielm'ntmlmt It possible. it Is not 
eypeeted that SMT mmteet will include any personally Mmttfeblo information other time 
the name oC the rn$m4M posting information within SMT end his/her business contact 
mfbmtatioa, not is it expected that: any specific reference will he made to FBI esse 
orimrestiiatlve matters. To the extent sensitive m mhxmm classified 
information is included, division. eoofoioaiors will he able to classify ted restrict access 
to the IiformPios, either in whole or In part 

SMT will reside on fee Application. Server Erwlmomeut <ASE), and will, not comteet to 
any other FBI systems- 

.2, Does the system/projeci collect maintain, or disseminate any information, about 
individuals (Le,., a human, being or natural person, regardless of nationally? 

_ MO |If no, STOP,. The FTA Is. low complete and after decision, approvalfe) 
spo'n.ht gp saornrtteo to iTti thne tht.ttJ tor tntnt l?tll approval.- haters you. are 
||4?: fihh $.<S 

_X_YES |TC yes, please continue.! The system collects and identities on each SMT 

page which FBI employees or aefeonaed cmtlmei persoonel have added or edited 
information from that page. 


3 . Heasr Indicate if any of the following eharaeterlstles apply to fee mfomratloe in. the 
system abont. t:adlvidna!st Bear in mind that log-on f:afotnrttfoo may identify or be 
linkable to an. individual.. 

(Cbeck all feat apply-) 


Tim Infdmtadon dimetfv iderm&s specific individuals. 


'fho Irdimaatino is mleodeb to be used, in cotptmctmn wife, other data efeimnts, 
to indirectly Identify specific Individuals. 


The Mommimn cm bo used. ns distinguish or trace an. IndlvidodTs Identity {Le„ : It 
is linked, or linkable to specific Individuals). 


If yen marked any of fit 

alrnvt 

y proceed to Question. > 

l 



Mono of the above 

. If nm 

re of fee above, deserfc 

f why 

the infer 

motion doc# not 

identify .specific kdividut 

WWW '§*•*>»><* *xv^wv^>; 

dselthe 

■r directly or indirectly. 
regnes:fed iciarlptlmn 

[If pi 

m cheeks 

n! this Item, 


4, lines tne system/prq)eet pertain only to government employees, eonfeeeiorss or 

















51 Is akmt United States ckmembor luwfklly admitted perniMsii resiled! 

aliens retrieved from the sy^em/pmieef by name or inker personal identifier? 

_X_NO. flf m* skip to tpeslleo ?.| 

YES. (If proceed to Ike meet rpesiim| 

6. Does the system/prejeof collect any trbnrmailcm directly from ike person who is ike 
suhieet oi. me s' 


NO (If »* proceed to puestloo ?.| 


YES 


o, Does the s?$fem/pro(ect support criminal €T, or FQ krvestigpdoif m 


assessments? 


no 


YES (lives* proceed to {gt$e$$jbn % 


h* Are sBlyoets of Inlonnatibo trbm. wEout the nitonmtion is directly cdlfisted: 
provided a written Privacy Act (e)(3) statement (either on the collection form or vial 
separate codec)? 


NO (The program will poet! 
the necessary form(s).| 


YES Identify spy forms* paper or electronic, need to respect: sock 
ittfotmalioa fro* 


7. Are Socle! Security Numbers (SSNs) collected, maintained or disseminated from tl 
system/|cptcct? Fell SSNs shook! only be used as ideodfem Ip limited Instances. 


N HO 


YES Mfm* 


SSNs are necessary to establlskYoofmo the identity oCaohieebt, victims. 


widmases or soorces In this lap- eninmeomnt or nuelllspace oedvlty. 



























SSNs are necessary i® Identify FBI personnel in fins internal adtuimsirofiv 


svsfom. 


SSHs are Important for oilier reasons, Ikwerifees 

The sp^ii/pfoieei provides special groMerfon to SFMefe,g,, SSMs are 
encrypted, bidden fmm all nsers vk & l«fa*p table, or only available te certain 
users), llesertfeet 

_ It Is not feasible .for lie system/pofect to provide special gmiecfton to 

SSMs. Evptsfo: 

Is the system operated, by a. contactor? 

JCJfo, 

Yet, infemMfem systems operated by eoabnetors for foe FBI may fee 
eoefoilered Privacy Act systems of records,: Ifee Federal Acquisition Ifogritatton 
coatafos Mandard contract elapses first Must lie Ipdnded. in fire event the system: 
oollests, tMmfolas or dlssemlokes Ml and addrtfotri ;reqfotemcBts may fee 
imposed at a matter of Depadmem. of Justice policy, CmmltMwm wbfo fire 
Office of the General Cooasel may fee required, if a coatraetor m operating foe 
system for the FBI, 

lies fire system undergone- Certiiestioo It Aceredltstloo (C&A) fey tfee FBI 
Security Division (SecD)? 


X. _ MO If no, Indicate reason; If Or A Is pending, p.rovlr 
completion date: 


A system security gkn (SSF) for tie SMYwm prepsed m m addendum 
to tfee Application Server Environment (ASE) and tfeos did not require a. separate 
C&A to fee conducted. 


YES if yes, please Inrlfoute tfee following, IF k&nwi*; 

Provide date of last C A A eertlflcat I 

Conf id cot lalliy: lam-_M orlerete Higj 

Integrity" Low 

Low Moderate Ffiife 


Avsllafedfev; 



. Mot: applicable - tins system la only pupewfeasefi. 















10. k this fysfom/pmfeet the subject of m OMBfofol budget submission! 
• X NO 


YES 



sms 


t*||« Of fortlMfl WlMl 


Does the s vstem coabuot ekta SBioiao as defined in. Section 804 of the 
hibkmeuil| BecomoMudatfona oCthb ON | C'ofofotssfoh Act oC2007 T F.L, 110- 
53 (eodlll: §: 42IISC 2Cf«em3>7 

X NO 


VFS 

X .y.yW 


If v«s s pleaae itmerlhe the data ■ 

2. Is this a national security system Os determined by the SecD|? 
X NO . . YES 


13 , Same of System/ Project:; 


_X.This is a mw system/ project: in development, f If yen. eheafoof this hioelo 

SYOIh Tfet PT,A Is now complete slier division opgrof ak§| AmM he 

sabMllfod to Fill OC1C/FCL1J for final Fill epproetl eat! determination if 
FI A nud/or ether actions are reqolred.| 


It EXISTING SYSTEMS /FEOdECTS 

1. When was the system/prejeet developed; 

2, Has the s>"stem/pmject undergone any significant changes since April 1 ?.. 20631 

NO fit no. proceed to nest question (iObJ 


YES ITyes f .indicate which of the .following: changes were Involved (mark all 

rlef m piano tien for each marked channel: 


>v X. V>A>A V v:x xt vV.\v>. Ax\,\v\j Jy X*W*; >A-xi VAVVU A;A:xx«x- •:>• y ;vt>Ads>.% 


A diattge from information in a format that is anonymous or non- 
Idsrfoiobkfo a format that: is ideotlliablc fo particular individuals. 

T'\ W O i {$.£1 i T sysfem/pmfeet, Including app!Ieat.fon of a now 

teclmofomp. that changes how Information In klentiflable form Is mauaned. 




























(For example, a change that would create a. mane open etmroomenl and/or 
.m-enne for exposure of data that previously did not exist) 

A cfeaage that results In information m Identifiable form befog 
merged., central feed, or matched with other database:?. 

A new method of uuihetkicatlng the use of and access to 
Itformadorj. in IdeotiiMtfe form by members, of the public, 

A systematic incorporation of dfoabases of fofomMtloo. in 
Identifiable form purchased or obtained from commercial or public sources. 

A new Interagency use or shared agency function that results to 
new uses or exchanges of information in identlflahle form, 

A change that results in a ness use or disclosure of information m 
identifiable form, 

A change that results in new hems of Information in Iderkiliable 
form being added info the system/prqlect. 

Changes do not ihidfie a change in the type of re cords maintained* 
tits individuals on whom records are maimomed, or the use or 
dissemination of information from the syxtenFgrpiecc 


raw« 

3. Does a FI A for this sysfom/prpjecf: already exist? 
NO YES 


!l 


Provide date/tkle of the F1A: 



b, I fe: 

the system/project undergom 

i any sigm Scant changt 

5 $ sire 

fo the FI A? 


NO 

YES 
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d fee 



OGC/Ft 

As V V >X S 

l.L ti tor ttnat F!M mtprovat i 

m& derermtnaEon If f 

id, & 

















FEDERAL BUREAU OF INVESTIGATION 
FOI/PA 

DELETED PAGE INFORMATION SHEET 
FOI/PA# 1272295-0 


Total Deleted Page(s) = 1 
Page 4 ~ b7E; 


XXXXXXXXXXXXXXXXXXXXXXXX 
X Deleted Page(s) X 
X No Duplication Fee X 
X For this Page X 
XXXXXXXXXXXXXXXXXXXXXXXX 





























SORN/SOR 


EPIC-315 











































EPIC-316 




























EPIC-318: 




































CiU: 



EPIC-320 





















b7E 




y<- : >v : 

i;.: A 'v/ j IVVa-:! \\-A> 


! l',!V >,> iyAyU 


oil 804 of Ulv 

vV .. -rVA0 ; 7' p T: : 


siiii 


I'pop ite b.bdo 

r> p m v p l (: ; > | sk pp b! ko 


nee Anri i 17.. 2003? 


H liilill 111111 ill 
mi liiiipii iiiiii 


kbik diiklblkb iiiiii 

'•;?'<••• y*.\V:k'\ •:' O : < : ' ^ I v 

v-'V.v,«;' .1,V> VA.-V y\::O.V»'.Ss> • 


EPIC-321 

























































ftLL FBI INFORMATION COHTMMED 

HSBEIM IS UNClaASSIFIED 

DATE 10-23-2014 BY NSICG/C32W3BS1 


iOGC/PGLl! 

FBI PRIVACY THRESHOLD ANALYSIS (FTA) 

NAME OF SYSTEM / PROJECT: 


08 / 16 / 2010 ) 


B1KRFBI Ihtkpte Asset 10: Pending 




FBI DIVISION INTERM EDIATE APPROVALS (complete as mctmm oo osooaof with Iptskm policy 

Program Manager (or other appropriate j 15:vision Privacy Officer 
executive as Divisio n det ermines) 

Stgnatnre: T Signature: 

Date signed: Date signed: 

Name: Name: 

Ti tle: __Li_ Liitie: 

Signature: SfpoMure: 


Program Division: 
TSC.iT 


FBiHQ Division: 
TSC rr 


Name! 


isned: 


</i IMe s 

mwd: <//> ... v .*m 



i Name 

i 

IT Branch Chief 



1 Title: 

TSC Pri vacy Officer 
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| Derived Front;: 

SYSTEM/PBOJECT POC 

' FBI 0< 

SC.7FCLT POC 1 

.By : 

Name: 

Name: 




Brograr 

n Office: 

tsc rr 

Phone: 



BoclosBIV Cik* 

Divisio 

n: TSC 

: 

Room Number: TSC 

} 

Phone: 


j :' 




Room ? 

^umber: 1 

fSC.■' 
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After Ml division approvals* forward signed hard ropy pies electronic copy to FBI 0C*€/PCL(J (MM iMHb 
(The FBI Privacy pad Civil Liberties Otikefsdeten u motions, conditions, and/or final approval will he recorded on the 
following page.) 
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f WAL FBI APPROVAL / D ETERMINATIO NS / CON DITIONS: . . 

FI A is requited by the E-Government. Act. 

FIA is to be competed as a matter of F8I/IXX1 discretion. 

Is FIA to be published on FBS.GOV (alter any RMD FOl A redact Ions)'? ......... Yes._No (indicate reason): 

X FIA Is not required lor the following reasonfs); 

X System does not collect, or dksemiiiatc PiL 

System is grandfathered (in existence before 4/17/2003: no later changes posing significant privacy risks). 
Information in the system relates to internal goyernmerU; operations. 

Systenr has been previously assessed under an evaluation similar to a PIA. 

No significant privacy issues for privacy issues are unchanged}* 

Other (describe): 


I Applicable SGRN(s): ...N/A_....._ :: ... 


| Notify FBI RMD/RIDS per MfOG 190.2.3? ...X.No ....... Yes-See sample EC on PCLU Intranet website here: 

| http://home/DO/OGC/l;rB/FCLIXFrivaeyCivilf«20ldbe!fies%2Oi..ibrary/forjn tbr..miogl90-2-3^ee.wpd 

S0KN/SORN revisionCs) required? X..No Yes (indicate revisions needed): 

| Frspare/revise/add Privacy Act (e)(3) statements for related forms? _X.Ho 


Yes (Indicate ferms affected): | 


RECORDS : r’"ntep^ : am shotdd consult with RMD to identiiy/resolve any Federal reeords/elcetrouic records issues. | 
I he system mav contain Federal records whether or not it contains Privacy Act requests and, in any cyent> a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide aoviceon bus j 

as well as on compliance with requi rements for El ectronic Reco rdkeeping Certification and a ny n ecessary update ^. _... j 

Other: I 


Elizabeth Withndl Acting Deputy General 
| Counsel 

I FBI Privacy and Civil Liberties Officer 



UNCLASSIFIED // FOIU 



EPIC-324 





























UNCLASSIFIED // FOR OJ 


L !NFORM::CriOM ABOUTTHE SYSTEM / FMMICf 

I. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
sysiem/projeet, including .interconnections with other projects or systems; (e) 
purpose of the systcm/projeet; (d) nature of the information In the sysiem/projeet 
and how it will be used; (c) who will have access to the information in the 
system/project; (1) and the manner of transmission to all users. 
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for new functions and 


6 s a 


Testing diagnostics are stored in the 

regression testing (see below for a description of types of testing), 
web-hased test management software that offers quality assurance tor requirement 
management, test management, and business process testing for IT and application 
environments. Application issues detected in testing are reported back to the developers 

d 


] Actual test data is not stored in theQ 


] The 


development staff is responsi ble for diagnosing., prioritizing, and correcting defect s and 
re-suhmlrimg updated code to £ ~ ' 


for re-veri ficaiion. 

a! lows testers to run various forms of testing as follows: 


New Functionality 'Test: All new functions are verified manually. Manual verification 
Incorporates a human tester to run and verify the results, and requires a pre-production IT 
system to host the application being tested in a controlled non -development environment. 
The test scenarios are based on functional doeurnentatiori and supporting user or system 
requirements defined by the business obi active. During this test phase, festers take into 
account what the system is inquired to do, and how the system have been designed to 
meet the requirement, in other words, the test mimics functions that the system will need 
to perform once operational. 

Regression 'Test: Regression tests are run to ensure existing capabilities mmain 
supported unless they were deliberately dropped or modified as part of the new release. 


UNCLASSIFIED // FOR 01 
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UNCLASSIFIED AfO| 

Regression tests will be covered as part o f end-to-end testing of new fyneionafity and m 
targeted regression tests of high impact areas sneli as data exports. 

Benchmark Test: Benchmark tests are run to ensure p revious release user-focused 
benchmarks are met or exceed ed by the current release, user-focused 


benchmarks: are verified manualiy and repeated for each release oi l 

Cross Agency Integration Test: Cross agency tests are run to ensure the] 
transactional imports, exports, and reconciliation processes arc not impacted by the new 
release and remain operational per design. The benchmark for this level of testing is to 
ensure that user function s. such as l og-ins, saves, or searches, perform the s ame or better 
than the previous release. I c urrently maintains test connec tions w ith. 


These agencies receive test data from the 
As previously stated, test data is only used for testing: purposes. 


The testin g process begins wher{ 
has passed! 


^receives an official bui ld of the software once it 

las defined 


by the proseet schedule. 

Across th<| [test phase (which may include several builds), the folio wing 


processes occur in this order: 

1, High priority tests are run; these verify the exports and functionality added or 
changed for the build and, if considered successful.,, then 

2, Medium priority are run; these verify continuity of unchanged functionality and 
benchmark user-lacing functions and, if considered successful, t hen 

3, |,ow priority tests are run; these include free form, end to end tests as a final 
check that all documented capabilities function and are ready Tor. production. 


testers wo rk with the development team to diagnose and resolve identified Issues 


may request a ne w build when a major 


throughout testing. |_ 

issue is detected or wh en a large number of moderate issues have been fixed and are 

u.-gvi tno tfi I 


mm 

Ives test data from 

[tor fime 

donatity testing to m 

i$ure that new 

software Imp 

lementation functions w 

athinl_ 

_1 requirements, Q 



requires 
access tol 


tor access k| |lcst data. This allow? ] l to manage user 


accounts and tacdUates user activity auditing, to identify inappropriate: or unauthorized 


use. 


Prior to the testing of any new function, a Privacy Threshold Analysis flU A) ot the 
system is performed consistent with FBI policy to ensure tnat the newly anticipated 
functions of the system meet the appropriate legal and policy requirements. 


UNCLASSIFIED M FOR QJO 
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2. Does the systenxTaxyect collect, maintain, or disseminate any information about 
individuals (i.e,, a human being or natural person^ regtntHess of nationality)? 

.X..NO [If no, STOP. The PTA is now complete and after division approvai(s) 

shotdd he submitted to FBI OOC/FCLii for final FBI approval. Unless you are 
otherwise advised, no PI A is required,! 


;s, please coMmue. 


3, Please indicate if any of the following characteristics apply to the information in the 
system about individuate Bear in mind that log-on information may identity or be 
linkable to an individual. 

(Check all that apply.) 

_ The information directly identifies specific individuals. 

The information is intended to be used, in conjunction with other data elements, 
to indirectly Identify specific individuals. 

The information can b e used to distinguish or trace an mdlvidttal’s identity (i.e., tf 
is linked or linkable to specific individuals). 

If fun marked any of the above, proceed to Question 4. 

__ None of the above. I f none of the above, describe why the i n formation does not 

identify specific indi viduals either directly or indirectly, [If you checked this item, 
STOP here after providing the requested description.} 

4. Does: the system/project pertain only to government employees, contractors, or 
consultants? 


5. Is information about United States ci tizens or lawfully admitted permanent resident 
aliens retries ? edlfom the systera/projeethy name or other personal Identifier? 

NO. [If no, skip to question ?„| 

_Til. [If yes, proceed to the next qwestton.} 


6, Docs the systenTprcyeet collect any information directly from the person who Is the 
subject of the information? 


UNCLASSIFIED // FOR 0J 
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UNCLASSIFIED // FOR 01 


ETON FA- 


NO 11 f n o„ proceed to qu estio« 7. 


a. Does the s^stfi«Upco|oets«ppprt c)ciotimL Cl, or PCI investigations or 


assessments t 


I yes, proceed to question : f.| 


b. Are subjects of information from whom the information is directly collected 
provided a. written Pri vacy Act (e)(3) statement (eitherso the coilcctkm|orxn. or via a 
separate notice.}? 


NO |The program will need to work with PCLU to develop/implement 
the necessary form(s).j 


YES Iden tify any forms, paper or electronte, u s ed to request such 


7. Are Social Security Numbers (SSNs) collected. maintained or disseminated from the 
sysiem/profeet? Full SSNs should only he used as identifiers in limited instances. 

NO YES If yes, check all that apply: 

SSNsare necessary to establish/eonSrm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


SSNs are necessary to identify FBI personnel in this interna! administrative 


system. 

SSNs are Important for other reasons. Describe: 

___ The systnjii/projeet provides special protection to SSNs (e.g„ 

SSNs are encrypted, hidden from all users via a look-up table, or only 
a variable to certain users). Describe : 

It is not feasible for the sysfemfproject to provide special protection to 
SSNs. Explain; 


8. Is the system operated by a eon tractor? 


UNCLASSIFIED // EON OFF 
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Yes. Informal! on systems operated by - contractors for the FBI may be 
considered Privacy Act systems of records, the federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PI I and additional requirements may be 
imposed as a matter of Department of Justice policy . -Cogitations with the 
Office of the General Counsel may be required if a contractor Is operating the 
system Jar the FBI. 

lias the system undergone Certification <&. Accreditation ;€<&A) by the FBI 
Security Division (Seep)? 

_ FID If no, Indicate reason; ifC&A is pending, provide anticipated 

completion date: 

YU If yes, please indicate the following, If known: 


Provide date of last C&A certification/re-eeriiflea tie n: 
November 3, 2010 

Confiden tiality: B a sic Moderate H igh __Jb n defined 

Integrity: _Basic Moderate High _ _fJndefined 

Availability: Basie Moderate High ^tladeiined 

Not applicable ~ this system is only paper-based. 

10. is this system/proiect the subject of an OMB-300 budget submission? 

_NO 

YES If yes, please provide the date and name or 
title ©fthe OMR submission: 

1 h Does the system conduct data mining as defined in Section 804 ofthe 

Implementing Recommendations ofthe 9/11 Commission Act of 2007, PI.. 110- 
53 (codified at 42 CSC 2000ee-3)? 

.. NO 

YES If yes, please describe the data mining function: 


12. Is this a national security system (as determined by the SecD)? 












13. Status iuf System/ Project: 

This is a new system/ project in development, {If you checked this block, 
STOP. The PTA is bow complete and after division approvals) should be 
submitted to FBI OOC/PCLB for final FBI approval and determination if 
Pi A and/or other actions are required) 

II. EXISTING SYS TEMS / PROJECTS 

1. When was tip system/profeet developed'? September 2004 

2. Has the system/prepet undergone any significant changes since April It,;10Q3 : ? 

X-.NO [If no, proceed to next question (11.3).] 

YES If yes, indicate which of the following changes were Involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

A conversion from paper-based records to an electronic system. 

A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to.particular .individuals. 

A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed, 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist) 

A change that results in information in identifiable form being 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 
information in identifiable form by members of the public, 

A systematic incorporation of databases of infonhafion in 
identifiable form purchased or obtained from commercial or public- sources, 

_.A new interagency use or shared agency fonctibn that results in 

new uses or exchanges of information in identifiable form. 


ONCLASSIFI El) 
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A change that results in a new use or disclosure of information- in 
identifiable form. 


A change that results in new items of information in identifiable 
form being added into die system/groteel. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

Other IProvIde brief explanation!: 

3. Dues a 1*1 A for this system/project already exist? 


X._NO ._ 1» 


If yes: 

a. Provide dnie/titie of f be PI A; 


b, flas the system/project undergone any significant changes since the PIA'r 



[The PTA is now complete and after division opprovidfs} should be submitted to 
FBI OCOPCLU for final FBI approval and determination if PIA and/or other 
actions are required.! 


UNCLASSIFIED // 


EPIC-331 











ALL IMfOHMATIOM CGETTAIITEI1 

HEREIN IE UNCLASSIFIED 

DATE 10-27-2014 BY NSICG/C32W33B9-1 


A’W\W'i $ ry<w.: : VvV; < jC x-\N 

X- O y v. ' . .i.W:i.\ : .tV■.? 


Mi V AC 

^AMC OF SYSTEM /PROJECT: ten-orisf Screemog CerJerOpe Way %mfer System 


BIR R FBI UrhRpe Asset I IF: 

...y. j; < - 1 .:j: p,. x .. A 

ChteABebi By? 
rrerrree: 




FBI OGC/PCLJj FOC 


1 


S¥S FFM/FBO JECT FOC 
Nw: Terrorist Sending Oe&&r (ISC) ^ Nsme: 

:’ : ’C^N?* (OWTS) : ; :: ^ ?£&&&: 

Program TSC Qf$fs$ of the Chie f j Room Number: 735b 

leJbrmu&on OfBeef (OCIO) : 

DmNom TSC t 


]. Robro Number: Office $04 

FBI REVISION fNTERMEIJlATE. APPROVALS fcempleier^ ubeeesxry eee^ooo^To lt|^Bh : BF>o polky] 


Program Eh v Riora 
• resort tuvjsxm a&me- 


'BlfiQ !.>msk>«: 

v y \ >:%>:% y> \vXv> b>v;>. > 

a^aC Va a \ > v v >;>< >\ »;* T>.<c >.< >v < 


Program Manager (or other approymam 
executive m DmNoo betermoteCf / 




.—.O”.: \v^.:.%. 

> ; r " : h-CiAO; i if f ; >/g< - | 

!feg sfefeF ' || / ] i Pete s s^pfe: k i s ( n 

'Name:.MargaretLolfcrgMf* t* L* ' 


VreuatOrsr 
Dale Rgued: 

rape: 


Nome 

?: rue: Pr rtR ay: Of ueer 
Si eootrrre: 

Nome: 
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.Afiw uM sIMskus appangsfe 'forward slpse-d fen! mpy plus towsfc #§|f' to FBI OC*OFQ.,B {MM 735&F 
{The FBI Privacy and Crvif fJferiife OBlSpT ueletfeuarieus, cofehi'>;n. splfe ObM approval will fe ffeorded fe she 
tolbwir-e oage.) 
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GM'LASSIFtB 


FINAL FBI APPROVAL / BETFRMINA'HONS / COMHTIONSi ff§§§ 1§1§§1§1 
FCCMIFfcMF fo|fo||fog FLA P 


mmm 




PL4 is repaired by the IGGoseromeM: Act 


FL4 of FBIfDOJ 4foeretiPf 


Is FI A to be mMisheb <m PBI.GOV foferapy FMD FOlAjefeti^s}? 


No (lodiesfo 


X. FI A is net mx&md .for foe blowing smsm(s): 


|; _System dees mt colked mm&pm, or disseminate Fit 

| System is gtsmdfoihemd (is.existence before 4/17/2003; bo latfo change? posing sijpbfieant: privacy nskifo 

| _. Itoormstion in the system relates to internal govemmem.opemtfoes. 

| System hse been inmnously assessed under mi emlmtim similar to a FIA. 

1 A Flo sigolfte-ant privacy issues for privacy issues are unchanged), The system amosmts to. mtmstrostom to 

| transport informationBom ope domain to another. Ilia only FI! that is retrievable from the system is the log-on and 
f password rnfomsatmo of system asms. 

I Other (describe): 


Applicable SORNt.G: Use s In formation Is covered bv dm DGI SPUN tMdt Computer Ss- s tems Activity and 

A cc es s ’Records ) 

Godly FBI RMJXR1DS per MIOG IFO.2.3? X.Mo ..Yes-See sample EC op FCtO intranet website here: 

htp>odhommD€BOGGiliF8/FCLll/Fnvaov€iGl%20Libertiesl4lOLIbram'r|mm for mfogiSO-2-3 ec-wod 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 

L Provide a general 4m«xip@m of the system or project that indadest (a) m 
the cpte*o/f :ro|t>cL locioAiof associated sterostysm; IE) strueiore of the 
systemfpro|eei, mclodlng intereonneetlons with other prp|eets or system®; (c) 
purpose of tie syRem/proJeeL fb) ®»lmt of tic information In the syolem/profeet 
and how B wil Be msed; {«) who will It eve access to tie inlbrnmtlun to tie 
systeoEgruJeet; (I) and tie roaooer of traosotlssloo to all .»m 

: The Terrorist Seraenmg Center s (TSCTs) mission is i> i4 [t|o consolidate and coordinate 
the U.S. governments approach to mmtimi seteenlng and facilitate tie sharing of 
temsista iafbmmtkm th&t protects tie Ration and nor foreign partners while 
safeguarding civil llberbesT Tils requires loiMoor'-edikot systems to he operated at both 
the Unclassified nod Classified security classifications., The primary psposn of the One 
Way Transfer System (OWTS j is to securely transports as necessary, any data relevant to 
the TSCTs mission .from the Unclassified security classification level domain to a 
Classified security classification level, domain. The OWTS operates only within the ISC; 
if does not prove infeematibo from within the TSC to domains operating outside of the 
TSC, 

The OWTS is strictly a data transport mechanism; It does not alter or transform the 
migrated data in any form, either systematically or via manual interaction^}. The 
trarrspo.rted data is only resident in the OWTS ontif the point that it has been. successfully 
migrated to Its destination which typically occurs in under a minute hut can tahe longer 
tar particularly largo tics. As the OWTS Is simply a date, transport mechanism, there is 
very limited user access (as there is no front-end application, by which users can. view, 
edit, modify, or alter the sysfeaf s data). The only users who have access to the O WTS 
arc system admmistrators who ate responsible to maintain and/or troubleshoot the system. 
Users log-in and password inJortnation is resident on the system, hut this Is the only 
oersondiy identillahle information that is accessible. 


2. Does the sysfetrbproteei collect, maintain, or disseminate any information about 
individuals, (he,, a human, being, or naptral person, regardless of nationality}? 

. X NO | If no, ST OF, The FTA Is- now complete and after division epprtm 

should he snhnritled to FBI OCCTPCLU for final FBI approval Unless you are 
othe.nvwe advised, no FIA Is rwplred,} The only exception to this Is tile user log-in 


YES iff yes, please condo ne>| 


3, Flease indicate if any of the following characteristics apply to the Information in the 
system about individuals: Bear in mind that log-on information rrary identity or be 
linkable to an individual, 

(Chech all that annlvd 
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UNCLASSIFIED 


The iolbmintioB. directly identlSea ^pepiteoMtvMttes. 

The ietbrotMioo m toeteed-io be used, m-mujm^mk with otter data, dtaxKtt* 
to Indirectly Identity specific- individuals, 

The intonation: can he used to distinguish or trace an.individoirs identity (Le,,. 
is licked or llfikdble fe specific individuals). 


If you Mar ked pv ; of tte htey% - proceed- to Qessiion 4< 

_ None of the above. If none of the above, describe why the io.fbrotaiten. does boI 

identify speerlk mdlvidoak either directly or Indirectly, |If you checked this liens, 
$T0F bore liter providing the requested drserlptlon J 


4, Does tbe systeoa/psoiect pertain only to government employees, contractors, or 
consultants? 


NO 


YES 


S, Is information about United States cif.ur.ena or lawfully admitted permanent resident 
aliens retrieved front the system/projeci by name or other personal identifier? 


YES, I lf yes. 


ft. Does the aystem/profeet eollect any infbmtatkm directly front the person wte Is tbe 
subject of tbe ntfomtsdon? 

NO fif », proceed to question Ed 


a. Does the system^tpeet support criminal,. CEf, or'FCI investigations or 
assessments? 


NO 


b. Are subjects of Inibooaiton front, whom. the information. Is dfreetly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or vie a 
separate notice)? 


llMtLASSlFIED 
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MO \Jh& program will seed to mmk with PCLU to devetnpAingiernenl 
the- accessary f&tm{04 

__ YES Identify any forms, paper m electronic, used to request such 

Miororadoo tmm the information subject: 

:% Are Social Security Numbers (SSNs) collected, maintained or disseminated: from the 
svsfem/nmieet? Full SSNs should only be used as Mentiiiprs m. lifflitad iostanops. 


NO 


NFS If yes, cheek all that apply: 


SSNs are necessary to eslshlish/confirm. the ideality of subjects, victims, 
witnesses or sdurees ih this law etrfbfcement of ipfelligeBce activity. 


SSNY are neeeksaty to Identity FBI personnel in tins interna! adminispatiyc 

system. 

SSNs; ate important for other reasons, Describe:: 

The eystem/proieet provides special protection to SSNs (e,g„ SSNs are 
encrypted, hidden from. all users via a look-up table, or only available to certain 
users). Describe: 

it is not feasible for the systens/projPctfo provide special protection to 

SSNs7 Explain: 

Is the system operated by a contractor? 

. 

Yea, Infbhnation systenis operYed by contractors for the FBI maybe 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the esYnt tbe system, 
collects, maintains or disseminates PI!and additional requirements tnay he 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may he required if a contractor is operating the 
system tor the FBI. 

Has the syatPuv inuiergon.p Certiileafton It. Accreditation (C&A.) by the FBI 
Security Division (SecD)? 


NO If no, indicate reason; if C&A Is pending, provide anticipated 
lion dale: 
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Iwie date af last C&A 


Cpiilsd«itlill 

Itys_Loa 

- Matter ateDigit Cad* 

c-flacA 

Integrity: 

_Laa 

• M^tllrMv lllllt Had 

tiftifd 

Availability: 

Lavt 

f Mefaite_Digit_Hat 

Siflae* 
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.0, Is this syslmv^aoject the subject otm 0MB-300 budget submission? 


IMS If yes, please provide the date end name nr 
title of the 0MB submissions 

Poes the system conduct data mining as deSaad in Section 104 of the 
Implementing Rceonmiendations of the MI Commission Act of 2007, R 
53 Willed at 42 USC 2!XK>ee-3f> 


2. Is this a national security system (as determined by the Sect))? 


13. Status of System/ Protect: 

_This is a new system/ protect in development. Ilf you cheeked this block, 

STOP, The FTA Is now complete nod after division approvals) should he 
sohntlded lo FBI 0€€rf*CMI for floml FBI up-pwal end determination if 
Pi,4 and/or other aeikmaare regoired,] 


IF EXISTfNC SYSTEMS / FMCM1CTS 


. When, was the system/uroiect dsvekmed? 


2. Mas the system/project undergone any signiSeant dha&ges since April I /„ 2IKI3? 


NO [If no, proceed to neat question (11.3).] 


YES If yes, Indicate which of If 


he following changes were involved (mark all 


A conversion from paper-based records to an electronic system. 


__ A change Boat Information in a format that, is anonymous dr uon- 

Jbeotliahte to a formal that is identifiable to ourttenlar individuals.. 


___ A new use of an FT systern/prqteet, including application of a new 

technology, that changes how mfoximtton in identilktble form is managed. 
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(For example, a change that would create a more ©pan envisotmeut and/or 
avenue for exposure of data that previously did not exist.) 

A change that results m information in. kiooiitMhe toon. being; 
merged, oentraMaed, or rsatohed with other databases,. 

A new method of atdheaiimiing the use of and access to 
information m klentiflahfe form by members of the public 


A systematic incorporation of databases of information in 
kten titrable form purchased or obtained from commercial or public sources. 

A new Interagency use or shared agency ftntcikut that results in 
new uses or exchanges of information in ideotiirafele 'form. 


A change that results in a 


disclosure of mlormatson m 


.rnemmathe tonn. 


_ A change that, results m new items of information in identifiable 

form being added into the system/nroject 

_Changes do not in volve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/proiect. 


Other fFrovide brief explanation!: 


3. Does a FI A for this systern/oroject already exist'? 


Provide date/title of the FI A: 


h. las the svstem/proteci imderaone any si ani heard changes since the FI A? 

V A- " • VA. »' • ' «V Vr. . 


NO ’FES 


|Tfee FTA ipiw complete and aFer division. approvnlis) should be submitted to 
Fill ©OC'/FCL 0 for final FBI approval and determination If FI A and/or other 
action s are rep id red, ] 
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sfaaii Be cesapletei tw Use datafease wwoiapr (or oifeer eppeBpdaleT^clali as 

A* Broelde Bale cfeeefeifi peeparedi #4/2010 

B- Frovifee a general description of dm .system or project ffeal Meiadfit same of Ifee 
spIeM/prp|erl, indodtag associated aerwaposst straeiare rf tie :epd«dprt||«ds 
pttrpwe; matoee wf ifee mimmmum It* tie spigot al i#w It will fee msed; w.t*@ will 
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,J£_. 10, If tie system mahmsm mtbmmtion about U.S, ckkens or legal permanent 
residents, It 0 covered by a published Privacy Act System of Records Notice, 

X . 11„ Records retention Issues have been discussed with the Records. Management 

'Division, 

X 1 . 2 , Any personally identifiable kdbttmtkm placed m a mobile device or ml 
media that is transported outside FBI. t&cditrcs must comply watt the Fib poucy 
ond^tjplilp must be password protected. 

It, If a data buss contains latalte that may he considers! 
seoslt.iveAxnitrovimi.ial or Is Mhlotutned as part of a larger Pill program* the 
database adMkdstrator or program tmsmger (or division privacy officer i most 
consult with tie firs Office of the Oeaeral Counsel* Privacy and Chit liberties 
>ot«ffial peed to assess tie privacy risks Ip a separate Pf A, 

sat may be warranted for 

record purposes, e*g,, eooriilitatlop with OQC, etc,); 
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DISTRIBUTION; 

- File signed original (or copies) in one or more official divisfcr/progrtatt lies fo 
documentation, impaction, records, and other oversight purposes, 

- forward copy to the FBI Privacy and Civil Liberties Unit (PCLU) (JEH 7338), 
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The Federal g«r«s' of Investigation manages its kfotMtsifoTt resources m an 
ekctromc environment that facilitates the collection of a wide variety o.t data, lire 
current electronic envlmument, however, is not always: flexible enough to meet the ever- 
iocreaslog demands of the Bureau, for sfmatfomil &wa*cne$$, sttitegic planning, and 
reporting, CosBooneolty, a majority of Bureau mitts have or are considering developing 
routine databases,using Microsoft Access" or oilier standard. epplfcgtfons, to repackage 
Boreati lofermatlou Into a format tliat more closely meets operational requirements. 
These routine databases combine Information already collected by tire FBI and 
maintained In. its case management system (the Automated Case Management system or 
ACS) or its administrative records, but permit a comb mat km of data in ways that may 
reveal additional useful In.forimt.km. about events and the individuals associated with 
them. 


Routine databases created in the FBI. share common, characlcrlstfcs. They arc 
created using unproved anplieailons and are maintained primarily on local servers, that aw 


connected to me ml.s internal computer network. Supervisors 


•*' Sonervisors in an office:, sound or 


program typically function as toe daiaoase adnumstraior and assign, access privileges to 
employees, contractors or task force members based on need to know and role. They can 
also perform o versight of database use In order to detect anomalies. Routine databases 
are password protected m inrther limit access. Mmmtfm m these databases, which 
may take the form of spreadsheets, word processing documents, as well as the more 
typical database applications, is derived from informatkm. already collected by die FBI 
for misslomrelatcd purposes, for which Privacy Act system, of records notices have been 
published as necessary, or Is information, available fothe public at no cost. To the extent 
that data is derived .from ACS, permission to extract the data, is controlled by the FBI% 
Information Technology Operations Division and M subject to coiarol by die FBI division 
owner of the originating information. 


When a system uses technology to manlpiiMe existing data about individuals In a 
way that the data is no longer functionally obscure hut, instead, may be readily 
retrievable, a. Privacy Impact Assessment (PIA) is required by both FBI policy (see, e.g., 


• ! Aw purposes of tills PIA, the term "routine database" is used to sfpdy dose databases, sgrssdfoscts or 
oa word pexessksg programs that ate estiploysd m masbgukts esinbig hBI dsoebut flat ho sowfte to 
te level el a rsfoor informatics. system. lire tmtim databases at Issue are all wwd by the cesiilkstbm 
sad accreditahos of as established PSI Federal ialbmtsden Sacarltv Masstw-nent Act (FISMAI system, 


4 Microsoft Access per mits? the creatine of a rslstfcmal database ntaoagssnent system that allows asm fo| 

fekaad foovs dam from omfopb to fe fosfofom mfemfoon 

for 0 |wM-k«l jxsqxxm as wil. for r^porkog & foe edit of the Mforosoft Aoosss 

da^ib&ss:* cowsd by i$h fo|y&cy Impact ACS vdjj provide for arform^bodc 

Rofeeoco 0) MicsosoS Aeoesaiimp-lies sts of dfo psfocuf&r tfofils siomly & lodeoffoo 

df die foot foaifofo isodware,. &ctK&i$ ottes* fo omofovod to foe FBI. 








Ihivacv Impact Assessments and Privacy Threshold Analyses, Updated CMditice, bbF- 
M$-mm$ (ill. 2!, 2006)5, .OOJ Uri§rSO!I>I A, mbby Sect!#? 208 of the B- 
Gtiffimment Act ami the rmplenmsbbg gaidaoee ptthfisbed. by tire Office of MMtagement 
amt Bad^et Experkrt* te however, that road* databases nieeiiog 

certain criteria til contain similar privacy risks and mitigate those risks b similar ways, 
lltemlbte,. MWtel- PlAs for such databases teed to be repetitive in nature. 

This FI A Is Intended to cover all road* databases tbit meet the system 
desAptieeeeitiloed herein, If ell criteria described below ire met, thee this FI A 
satisfies the FBI and E-Go vernmem Act privacy assessment requirements. To verily that 
this is the cite, a checklist has been developed launched is ah ippeodiilfhat most be 
completed by the database owner and provided tor review aid approval, ml Witix &i 
description of the compliant, database, to both the pertlneai Division Management ami its 
Privacy Officer is well as to the FBI Privacy and CM! Liberties Officer.. Copies of 
approved checklists should be trmbiumed by Division Privacy Officers ami available for 
inspection upon: reoaesi. 



1,1 What itifeiffpfieri Is It 

A routine database will extract aid. store personally ideotiflable data Bom 
ernstmg -frm records or rrom. reemms t:uat arc ivauimc to toe poonc at mmmm cost, snob 
as Internet search engines or the news media, 5 The data may be derived, from. ACS, the 
Bureaus nadir ease management syslenA It may also consist of idmmistntim 
linlbrniitloir tbit the 'FBI otherwise maintains, sued us payroll or personnel data.. The 
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field division, If a database contains btfonnation. that may be Wtebemd sensitive: or 
cora.ro vets A or Is malmimed is part of a larger FBI prograni, the database administrator 
or program manager most conmdt with the FB.fs Office of tbe General Cotmsel, Privacy 
Ho v..*i v v, ..oonutt res uuouoooe nceo ,o assess toe save sc v stSws ns v suaiatsie v.sA, 

; : : : .v. x >v ■ •>. . • 

The in.tbrmst.bn. is provided by individuals and/or is collected by FBI personnel 
Casemdaied Mbmmfiba is derived Ifotn Interviews, mvest htst bus or other acflvtles 


Pskt salwipdoas m dsmbsts nwisibreb by commercial data brokers Is gmoal do act rams tie 
fer w &i 

As dm FBI mmmx b vase rnmsgenmu syuem torn ACS to Semite, te need tor oasbev dsiAesss. 
ray rbraaasl. Ibis FIA, ffiveser, is ialeadcd to cover any owndalahbesdlgt ssv cmatai teed to 
ibvmbaa la ibe FBI's p-sraery case laanagosnoit omens or exisbea bks. 























not incftsde information from commercial databases unless that linformation was 
Brevioosly IncotyKmated bites the otfter FBI records from which mtoematam In the routine 
database Is derived, fetformatfon in tbs databases, however, may be obtained from 
sources that my member of the public could access u minimal cost 
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The infonmtkm has already been collected 'm support of the work of tbe FBI unit 
that, will me tbe database or is obtainable from public sources, but it is being rccoullpred 
into a functional format so that it can he manipulated la. order to.meet reporting, 
requirements, to Improve situations! swsra&s, to IdcMMam strategic pkntdngand to 
make associations within tbe date, if any, more apparent. 




The general authority for the FBI to investigate crimes, Including terrorism, and to 
acquire, collect, classify and preserve records pertsmlng to those mvestlgations can be 
found in 28 U.S.C. §| 533 and 534, The FBI also has jurisdiction over specific crimes as 
a result, of more narrowly focused legislative enactments ami:has intelligence 
respOiisIbOhles pursuant to the Patriot Act and other statutes, Adsnidstrative information 
is collected putmmt to the general. government authority for this purpose. 
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tiief werp mitts 


The information In the rouriue databases covered by this assessment duplicates 
mfortoMfon that the FBI has legally collected and maintains in. another FBI systcm(s) or 
is krformatioo that is publicly available. There Is a privacy risk from the recombinailou 
of Information Into a separate database, because connections among cite data that might 
have been obscure could become more apparent. One of the reasons for using available 
application software, however, Is precisely to make these connections more transparent. 
This privacy risk Is mitigated by the &ci that access to these databases m limbed to a 
squad, unit or office that Is likely already to have access to the htlbrmatlon that will 
populate a routine database, but needs the added benefit Of the software tools to Improve 
Its ability to pursue law enforcement or terrorism assignments, provide analysis, conduct 
administrative operations and. create required reports. 
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concern, t 
mlnluqlf 
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miym data to assist ysars In 
» ****88'of nolty 
referred to as d* 


TM& atfetog. lavolves the use of sophisticated felt tmalysls tools to discover 
previously eritewi, valid ptoterm sod relaitostohfps to largo data sets,. While a hy~ 
peartocto! tfe use ofmutlne datahwmrasy fee the afeilhy to discern tofeiaasMpe aorDttg 
dm® that previously wore mi apparetd, too use of toese databases is ml toy purposes of 
data tuto.tog, hut tor Improved data mm&gmtm* Large data seta are mi beteg created to 
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dale rmotog — auto to fact, arty system that creates large data sets would retfaire a 
separate privacy asmtysto Smaller databases are being created from totormaliott 
wfeiiW to ACS or dsewfeere m order to more effectively tnartuge ami control dam 
'tbit will fee useful tor operational strategic or aduumstratlve purposes. 


m individuals or 

a 



Because the FBI needs the fbtototoy to collect a wide variety of totormetloo tor 
law eutbreesreat ourfxwes horn, a wide variety of sources, that totormatloo k not always 
accurate, complete, timely and relevant, This la primarily doe to the fact that at the time 
of collection it is typically impossible to ascertain that the totomiatkm meets these 
reouireotems, With the passage of time or when viewed to connection with other 
inforntattoa, seemingly irrelevem or out toady toJfemaitou may aeoalre cow slgtoflcauve 
as further Investigation brings new details to light. The FBI, oeverthetes, has a business 
need m. matotito accurate records. Before the Informstlou that will he combined Mo the 
routine. databases at issue Is used tor operktooal purposes. It is checked to mmm its 
totegriy, Mouitoe datahasas, ntoreoveu are generally ernployeb hy sguabs or units that 























are already ti&mdkr with the Information to be included. If an anomaly occurs during 
data tnsmipuktito* iudivkitud users have die ability to exasstoe the source toformatton. 
and other data to cormct the anomaly as m$e$$$ryt to. this veto, the recombination of 
existing FBI data toto a routine database may reveal that the original infoCTadon rec|otes 
revision or updating. Consequently, these routine databases, may themselves contribute 
to overall intonation accuracy. For routine databases containing administrative data, the 
information can be cheeked for accuracy against the source flies, 
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tlcm period for tli€ data Id die 




The disposition of routine database records Is directly managed by the Records 
Disposition Onit of the Records Mauagernent Division, which works with FBI system 
owners and MARA to develop disposition authorities for these electronic Information 
systems.: 


controls that mm ha in o 


sSCf!» any tffS 
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controls that may m id place 
Information is handled in sect 
descrlhed uses. 


The FBI’s purpose in using routine databases it to Militate the ability of 
kdhddaal offices, squads or programs to provide accurate and timely Information for a 
variety of uses. There is an tocenilve to ensure that the information is correct because 
otherwise any resultant products, such as reports, will be toaceurate. As m enforcement 
and oversight mechanism. Division managers and Privacy Officers must review and. 
approve a checklist that each program officer completes for a pantcojar apptlcatkm to 
demonstrate compliance with, the attributes required for approval Oversight of this 
process will be provided through the FBI's Inspection Division working to 'conjunction 
with the Privacy and Civil Liberties; Officer. 

Contois on die use of Information in. these .mutton databases are applied at the 
user level and at the program level Users are limited to the tmobm of a division, squad 
or office who are provided access based on a defined, need to know and an egpropmte 
role requiring access to the data. Oversight Is provided through the grant of access 
initially and through the ability to audit system use, including the ability to recommend 
disciplinary action for misuse. In addition, program controls are applied through 
supervisors who gram access to these databases and througtothe PBFs Inspection 
Division, wMcfl conducts periodic compliance reviews. 
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components of th 
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The will, fee within ifee FBI wife those. wits foot have; a need 

for access to. order t® perform feek .mlasfon, la soma eases, the mforsnatkm Is sternal 
wife nwssfoers of task, forces or detslees from other agestctee but sharing m. these 
ekeinnsttecas i$ considered internal safe recipients are expected to comply wkkmj 
Imutoa! FBI nollckts maardfoa. access and use of foe data 
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feat typically access m limited to those wIfofo the null or office that have a steed for access 
to perform mission* critical tasks.. Sfear&sg twyond this core group typically, does opt take 
place, feat foe data may be used for repoplog purposes and. those reposts wood! -be steed 
W8 broadly based, op. operational need, 

Il| Hew Is Ills information transmitted or iliillilli 

I'ooostotssioe. Is plrnaiily elemtosne and. may fee dorse through clectrutnc media or 
over a rwtwork. 





; what privacy risks wort identified and f* 


leeatsse dm itbormation few populates routine databases a derived, fern data that 
already exists within the FBI or consists of public source material there is a privacy risk 
feat additional. knowledge may be available from the coniboatioa of data that otherwise; 
would pet fee apparent, litis risk is also Ibe benefit of using. these »ia applicatleas to 
better understand what mfomMion m individual program fees or knows. This, risk: is 
mitigated fey limitations on fodivldoals.who cap access the data In its combined form. 
Many roetme dal abases arc eteated for the couvenkaoe of a. spmtd, unit, or office, end a 
database administrator llfip access rights to those with, a hosts fkk need to tew, 
Ifosswords for access may also be employed to enhance the security and privacy of the 
information, in addition,. any transfer of the inifermafltm to mobile devices must meet foe 
wepskements of FBI policy for protecting Information on mobile devices. 


























There is also a privacy risk that the replication of data from one database to 
another eoald result fci the production of erroneous data through keystroke errors. The I 
routine databases, however, are typically checked by supervisors to ensure data integrity 
and thus minimise that risk. There is a farther privacy risk from the Ida. that the ability 
to audit these routine databases Is cot as robust as In other more sophriticated systems. 
Bat as a oreoonditloo of aooroval for these routine databases, the attached checklist 

' •< :.••■:■ XX ' 

requires the completion official to signify that there is art ability to audit access and. use., 
m lire privacy risk Is reduced* If so. kElIvkiaa! user is fmm to be accessing the database 
inappropriately,; disciplinary action euo he taken.. In addition, these databases will fee 
subject to the FBI’s periodic inspection process to ensure compliance with the 
reoofretnents for database aonrovul. 
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No system-to-system slmriug between m\ FBI routine database cod an external 
recipient is contemplated. Instead* disclosures of discrete pieces of information may fee 
made, as appropriate, to other federal, state, local tribal or foreign kw enforcement 
entities. Congress or the public is the same manner as such, disclosures are made of 
information from the underlying systems. For example, if Ittfotniation front a routine 
database reveals criminal activitv in a particular location, the FBI office mfontammo the 
database may share that information with appropriate state or local law enforcement. 
This kind of tout me sharing, which is subject to rules go venting need to know* 
restrictions ob further driseminatfon (as appropriate) and: other limitatloos, already 
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See previous response. 


If sharing occurs, it could fee by any means necessary to efl 
discrete pieces of Information - efoctrook., paper or otherwise. 


or wnat purpose? 


dlsploeecl? 

set the transfer of 
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the fabject to FBI. corporate policy and'controls regarding; security asnd privacy 

that jKS'wi mf ikcbmrm of Mfermstloo fmm FBI ites. 



Tk& mstmrnl mhmm th&thtoxmmplmed will fee consistent with disclosures 

■ VX .V 

Wttmtif .made from FBI records. If training Is required to underhand the FBI 
ln§>msnlom k ts.gmmfai m m Individual tails, ieoaoae there ■will be no dlmiosmes | 
between these tontine databases and other agency systems,: however, tfeere is no iseed for 
Itilmmi on use of these: databases. 



Ip plapp tor ciitcllflpg lift 


Whets dado seas m-.«fe &ea FBI tcmals generally* asp? caveats ost ose of the 
Infbrnsasoo ore associated wkh the data at the time of the disclosure. 
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m differs from the disclosures currently made from the stnderlylng FBI. records, and 
thus any sharing will be subject to current processes mi limitations an (he access to ami 
stsc of FBI mbw0satio.1L If personally Identifiable itdbrnsadon Is <k>wrdnaded. to tmfblte 
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ptmeeied m mmk tteeugh the use of passwords and encryption: sofrware. Consstioemly* 
there ahotbd. fee no additional f^fmey risk from the estetaal sharing of the mfemmatlnn, 
l» m&ay cases, moreover, btilraMkm in fee shared will oof contain personal. identifiers. 






















notice as an appandlM. (/ 



Individuals«tvplctlly not provided a separate notice- about foe disposition. of 
information collected from tliem in connection with Si. brcemcnt 0i. :?)&> 110>. ,v<>. & 

security investigation.. General .notice: Is available, however, through publication of 
Privacy Act System of Records notices that govern information. the FBI collects and 
maintains. The majority of htformatioo to be- placed lit the databases covered by this PIA 
would be covered by the system notice for the FBfs Central Records System, last 
published in the Federal Register on. February 20, 1998 (63 Fed. Reg. 8671), When 
information is collected primarily tor administrative purposes, uotJoe is usually provided. 
on the form used for the collection. 
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In many cases, the information at Issue will be chraloed tfoougb the results of 
Investigations. In most cases, there Is no right to decline to provide information. In those 
cases where there Is a .right not to participate In or cooperate with m investigation, or 
otherwise not provide information, the individual may be afforded that opportunity. 

When information is collected primarily tor administrative purposes, the collection Itself 
wv he v O iv-VGWvi. ry and thus the individual would have the right to decline to provide it. 



If m individual has placed any enforceable restrictions on the use of information 
that the FBI has otherwise collected, those restrictions would follow recompilation of the 
information into a routine database. Them is no other opportunity to consent to or metric 
particular uses of the database information. 











of will be obtained,. explains that the “FBI uses. Its computers, -when, 

necessary, to collate* atmlpe, and retrieve investigative Information m the most accurate 
seal expedtloto manner possible.'' It also states that the FBI suptx>rts complicated 
awestigtolua outliers be osir^ sgeeMIued cooputer spasms or Individual 
tpleroebtoputors nod that duplicate records and etomets of tulfoanstlon ere kept to various 
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combines the totbntMioo It receives to ways designed: to collate, aoaiyae Me! retrieve 
lolbrotolloo, This tratopareuey help to mitigate tire privacy rial, that accompanies 
recompilation of fofortoatloe If oat cue collection Iton another tottttoe database 'wtee 
toktlooships among the data eery become more apparent . 
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IrallvMuals are artitled to.avail themselves of the procedures otultoed In 2B CEE. 
Part 16 in order to seek access or re-dress of their mm totoraiatkat Although many of the 
FBI's ties are oaerapl from. the access and antendtocm recftbremenis of the Privacy Act 
the FBI has a Business seed lor seen rate records ami mt% in. Its discretion,, permit 
Individuals: to supply statotoetos disputing: particular tacts to FBI records. 




































Although 4| FBI’s law enforeemtk record systems are typically exempt from the 
access stm! amendment provisions ot the Privacy Act, io sis OiseretKHt, the FBI. .may 



M intetritv tad the records are- oat otherwise subject to amendment or cotroctron. 


*** . 4 ? 
/ *# 



As .noted hi the previous response, m its discretion the FBI considers requests tor 
ametxirneraAxtoxxuioa of Its law enforcement records, Judicial review is also available In 
appropriate cases when aa individual wishes to challenge action taken M reliance on. 
inldrmarion derived from FBI records from a particular database. 
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Each office, unit or spusd that uses, .foatke databases defines §§ ownmles for 
access based on opemidimi need. 



. It is possible that contractors located, in. particular offices, units or spends will, 
have access to the databases covered by this FI A, In that event, however, contractors 
would be treated ike etnpfoyees and subject to the.same restrictions on access and use. 
In addition., contracts with vendors that involve personally identifiable ifooroMion 
contain the relevant Federal Acquisition Regulation provisions m^ahing Privacy Act 
compliance. 
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tf tlit system? 


The aaslyhe depends op the rules eijiyished -fer but generally a 

supervisor roauages the dutebuse and users have mad, write, or read and write access, 
depending. on their office 


1 v% : 



Because the databases are created by u-dlvklaai off lees, units or speeds, users are 
deteroilned by the database ereators/sepervisory personnel, While written doenme.utatks 
may not he available hi all eases,, the checklist that each system supervisor must eotnpleb 
requires acknowledgmeut. that access is limited only to those -with so. operational, treed to 
know. 
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Thdesslgntnem: of rote is subject to supervisory appdlyal and : is. based on 
snisskut repolretaents attd the IMIvisItial'b need, for access to perform Ids or. Sir duties. 
The databases that. are created using routine software must be capable of being audited to 
ensure ft ut Is being used consistent with the purpose for which the database was 

created and the database must: operate on a platform the W&SC^t 4 Cc€$t3$ $£*§£ &€&§ &£&§ 
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operate on. the Fisks interna! eompuiec network. 



bee previous answer. 



Alt FBI enprfoyees. contractors and task feme mentbers are required to complete 
yearly inlormatlon security training which contains a substantial privacy component. 
Additional privacy training Is available on an ad hoc basis to individual FBI divisions or 
o. addition, the FBI has developed training on the use of ILS, nerson 





















kfooMtfcm that is available Bureau-wide. Oiher teaming is provided m cmmectkm with 
specific programs or systems. 
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As noted previously, routine databases operate primarily oa tbs FBI's compotes 
network which has been subjected to the Cbt A. process, life system on which these 
databases operate was recertified and reaecredited to January 2008, 
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nftrols. 




Routine databases, usingMicrosoft Access m other softwate applications that 
have been approved for use throughout the FBI, help divisions, offices and squads 
manage Information m a manner that effectively meets miss loo needs, These routine 
databases operate primarily on the FBI's internal computer network, which meets 
Certification and Accreditation requimments, The laforanuion that populates these 
databases Is derived fern other FBI mformatloi systems or cart be obtained by arty 
member of the public. The wcotnblnatloo of data worn those sources may result in new 
information being accessible that was previously obscure or unavailable. The privacy 
risk from this recoufolnation, however. Is mitigated by me fact mat access-: tmme 
databases is limited la each instance to those with an ooersiional need to feme and is 

x ..... . .. ••••••••• • 

controlled by supervisory pecsooneL In addition, to the catertt that a clearer picture of an 
event or individual emerges, these databases may help increase data accuracy and 
imeorliv. 


To increase FBI efficiency and enhance operations, the FBI employs loutlne 
database technology to manage Its in tor nan. km resources for purposes of situational 
awareness, strath ning and .reporting. The privacy concerns associated wife the 
use of these databases are mitigated and outweighed by the benefits of enhanced 
iotbrntadon knowledge that flows ho rn the use of this tedmoloev, 
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WtmmAL / DETERMINATIONS /CONDITIONS: 


. is. zx aagMM by fee E^iovcmnmiiMb^ 
is to he sompleted as a matter ofFBI/DOi' fescmtfem 
be nobis shed on FBI. GOV (after any RMD FOIA redactions) 


He {felifebe reauo 


A is net reared for fee Mfowiag tas#): 

_ System arms mt collect, maintain, or fessetnmaie Fll. 

_Symm is girnfemfeered (fe existence before 4/1 ?/2feB; no late; 
_ Inferrosfeon in fee system relates to internal government unetah 
_ System has been, previously assessed under an evaluation sfeuk 
_ .Mo sigfelieans. privacy issues (or privacy issues are unchanged). 
Other (desedkij: 


r CMnges pnsmg srpfessoi gdyasy 
m to a FlA. 


ppiieafie $0;RN(S;>:: 
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L IAFOLMATION ABOU T THE SYSTEM / PROJECT 

L JPrmlM m general a!' tfee spitst** or project tint bselMeso (a) name »f 

fbe sy sfendprtrfeet, iBclMttng 'MsnelM«4 oeroByppg (fe) Hrnefetre «f'|be 
sysRmfpreJeeL itts 


mots Of systems; (c) 


purpose of the sys teoa/projeet; (d) a uto re of lie lelorMaflop ip tie tpiepFpreJeef 
«d Low if will fee 8 seel; (e) wfeo wii km* mmm to fie lefermafleo to tie 
syskndprofeeL |ff mid tie mapper of fraosotlssfem fo ell mmm. 

Tie Wei"ioeed Automated Cose Support (WACSV applesttop to a weh-based interface 
that provides access to several key tod corntrumlymsed Eutebotts wit hin tie FBEs 
AotomatedCaso Support (ACS! system via a standard Web browser, I ~ 


WAC$[ 


accessible to authorized FBI employees, coolfactws, and task force mem bers via tie 
FBINcd ettekee,, which is classified at tie Secret level, Ttm sysletnis not accessible to 
tie general public, 

WACS dees not akare/mamtaio my data; rather. It simply acts as anetder means of 
aecesslnu acd kvtefkemi with ACS, 


b7E 


b7E 


b6 

b7C 


WACS oats os tie FBTs mainframe. 


2, Does fie systeoi4>rp|eet collect,, ntamta; 

in, or dlssetulnut 

e any hum 

Tsudion about 

individuals (i a human being or natural j 

person, regsrblm 

?s of Bailor 

cillty)? 

X MO | If so, please stood 




YES (Ifyesf please continue.| 




3. Flease Indicate if any of the following e 
system about individas-la. Bear In mind fit 

haraetefi sties ap 
it log-on mfosmt 

ply to the 1 
Uien may 1 

nJonnalion in the 
dentlfy or be 


b7E 


linkable to m todtvtdaai (Check all that apply,} 

_Tie iMbmmfloo. directly Identifies specific individuals. 


Tie Infmmatkm Is intmtted to be used, in conjunction with, other data elements, 
to indirectly Identify specific: Individuals. 


! WACS vas pivViokly laaotm ssPlKnuk, 

t. ; XCLASS!FIF1MFOR OFFICIAL CSC O.YLV 
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_Tlis information can be used to distinguish or imce m imiividuars identity (Lev, 

k linked at linkable to specific indivlduala). 

If mm marked any of the aiMve x proceed to Question % 


_None of the abo ve. If none o f the above, describe why the inlbs 

Identify specific individuals either directly or indirectly. 


v\ t 1 % v> ^'v.c> v? *' •' ■: 

:UVU;bK v-.C'-. •'• :• t'.' •. 


4, ;Doss the systcm^roject pertain only to government employees* contractors, or 
consultants? 


5 . Is information about-United States oilmens or lawfully admitted permanent resi.desrt 
aliens retrieved Jroni the svsteta/owtect by name or other personal identifier? 


U | It no, skip to qmstum 


YES flf yes, proceed in the next cpesiwtnf 


b, Does the eysieoFptpjeei collect any Information directly fern the person who 
mbmt o f the information? 


NO |ff no, proceed to question ?>f 


.YES, however the infortnalion is not entered by the pmm who la the 

pbteet of the tnfbrnratlnn, but rather by FBI personnel who aetphto sued ioibrmsbnn in 
the performance of their official dados. 


a. Does the sysiem/gcoiee 
assessments? 


a support erinnnah CT. or FCI investigations or 


YES pi'yes, proceed to question 


b. Are subjects of information front whom the Infb.mmtion is directly collected 
provided a written. Privacy Act (e)(3) statement (either on the collection form or via a 


separate notice I? 


w MO |The program will need to work with PCLCJ to 
developArnpietpent the necessary formfs),] 

YiS Identify any forms, paper or electronic, used to retpesi such 
Information from the Information subject: 
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f. Are Social Seemiiy Numbers (SSNs) collected, maimiamed or disseminated from the 
systetmptppetd Pall. SSNs should, only be used as identifiers ib limited instances, 

ACS YES If ves* check al fimt applv: 


SSIMs ore necessary to eslabiitAtettitm the identity of sheets, vfciims* 
witnesses or sources to this lew enforcement or intelligence activity. 

SSNs are neeessarv id identlfc FBI. personnel. in this Mema! adobmsUaih 


_SSMs are Important for other reasons, ©escrlhet 

__The system/project provides special protection to SSMs (e,§., SSNs are 

enervotal hidden from oil users via a look-up table, or only available to certain 


pserst, Peseffom 


_It is not feasible for the sysfoot/projeei to provide special protection to 

SSMa FaptahK 

M Is the system operated by a contractor? 


_.YES. Information salterns. operated by cootraetors for the FBI may be 

eottskloted Privacy Act systems of records,. The Federal Aepmsitkrn Regulation 
contains standard contract clauses that mast be included in the event the system 
collects, mmiimm or disseminates PI! and additional requirements may be 
imposed as a matter of Department of justice policy. Consultations with the 
Office of the General Counsel may be required i f a contractor is operating t he 
system for the FBI. 
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9, Em the system undergone Cerdhealkm & Accreditation (CM 
Di vision f SecD 1? 


&A) by the FBI Security 


MO If »% iititeaio reason;* if <h%A is pending* provide anticipated 


YES if vos, please indicate the following* if known: 


Provide date of last CM.A eortlfleafI«/rs>eerilftcadeo: 


C'oofldeadalltvj Law Moderate 


Undefined 


lotegritv; 


Low Moderate High Undefined 


High Iln defined 


..Mot applicable - ibis system is only paper-based, 

i d. Is this fystom/grofeet the subject of so QMB-3C10 bonnet mhmisskm.*} 


YES If yes, please provide t he date and name or 
title of the 0MB submission;: 


! L Does the system conduct data mining as defined m Section §04 of the Implomettfing 
Rocomtnendshons of the 9/11 Commission Act of 2009, P.L. 110-53 (codifcd at 42 USC 




2, Id this o national seemitv svstem Css defertnined bv the SecDl? 


I o. Status id: System/ Project 


Tins Is a new aysfemtgreleet In development 


U Y CLASS IF lit P//FO If omt Lti USE ONUS 
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IS/FECMFCTS 


I, Wfem w» die syMem/pmjeet developed? 


2. Em die sykemforoieet underoone any slgnMeant changes since April!.?, 20CIS? 


MCI flf no, proceed to Best qkmUm 


YES ft!' yes, indicate which of the .following changes were Involved (marF all 
changes dial apply, and provide brief explanation for eadi Marked change); 


A conversion from oaoerfoased records to m electronic: system. 


A change foil miontmdao m a format teat is snnrtytnoos or nop" 
Identifiable to a format dial is- identifiable to particular individuals, 

..... A pew esc of an IT sysfonvprofcch including apglfoatfon of a ne w 

technology, that dtanges how information in ideofiOsMe form k managed. 
(For example, a change that would create a more open eoviroomeot ddd/or 
avenue for exposure of data that previously did not exist.) 

. ? A change that results in Information io identifiable formbeing,;; 
merged., centralized, or matched with other databases. 


A new medtod of antbomieatirsg the use of and access to 
informatpo in identifiable form bf members of the public. 

.. A systematic ioeorporafion of databases of information in 

identifiable form pamtmsed of obtained ikon commercial or public sources. 


_ A new interagency use or shared agency function that results m 

new uses or exchanges of information in identifiable form. 


. A change that results in a new use or disclosure, of .mtbtmafion in 

identifiable form. 


A change that results in new items of information in idenb liable 


form oemg mam rote the system/project,. 


_?_.. Changes do pot. involve a change in the type of records 

tilCi' individuals on whom records >lv? V a x J.<vi * i O' r the use or 

dissemination ofinfbrnfotfon #001 the system/prqjecu 


tabled. 


Other f Provide brief espknaffosjf 
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Doss a Pi A for this systsm/project already exist? 


MO 


YES 


Lf ves: 


b.> Has the eysteoYwoteet oodergone any shpifend changes since 


m 


Yes: 
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ALL It-irOKlATIi. !H! DjlITAIHEC 

HERSIH IS Dl-ICLAS 31 TIEE 

DATE 10-27-2014 BY NSICG/C32W33BS1 


(OCCTCUi (Rev. I) 


OF SYSTEM/ MOJECf;I I b 7E 


BICB fill Asset IB; 


N/A 


| SYSf lM/FBOiECT FO € 

I Same ] I 

| fkogr« ®Mm Opsmtmg System 
j Support ilmt fOSSC) 

! Bikislom ITSD 


IWlic/ PcOFfg 

| H»te; AO€| 

| Fhmm: l I 

| Rmxn Bmaber;: lEH, 1m 7350 


| b6 
i; b7C 


'mmt\ 


] 


§ %mm Mmmbm: ESC RSI 11 ? 


FBI OIYISI ON1ATBBM EBIAYF AFFBOYACg _ 

| Program Manager (or other appropriate | Di Oskar $ti mm OlCcer 


I exeerPJve as BMatos* 4ekmrmxM 


Program Bmsio&; s ^gaamre: 

Sappai \ Bam 

Seekers 1 l%me;[ 


I pgmkare: 

I BmeOprsd. 
i Mams: 


s Title- SsigcpAorv IT EeealaSar I 'fife: A-/ J/ : K <«>h M"' 


tmm ^mkm- 


£ 


| Slgeatore: 

I INke yeai: —-• 

| Same 


]• 


I Tala. OS.SO Oak CMrf 


| Ssgaalufe; 

| Dale Agees! ; 
| Name. 

I Title: 
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Alter mihium agprwalg Amwari BpmA i»A eepg pise efeOrmrk eogg to FBI OlOPCLil pill ?MA>, 

Ilia FBI FBmey amlCRi Mtafe OSIesrY istewkkmbg somlklaps, will Sej-oBoafel aa im 

felewmg page,) 
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PIA is fey 

_PM is- to fee ooatgleted asaamber of PBi/DOJ thsemboss. 

h PIA to ho published m FBLCiClY faier sob- EMO POM. mdaorioas)/ 


Y«&. 


*w 


X_'PIA is stm rcvgtlmri for foefhfimvhfo| 
__ Systera does oot ceifoei, mslataayor dssseatmafo PB; | 

.Sysfoat is lymfoiaherod (its esisfoaeo before 4/1 m toot changes posfog sigafoeaai privacy risks). | 

jL informal ion la the system relates to mtmmlgmmmm^ opembosts. \ 

.System fees heea previously assessed under m evafoatks? similar to a PIA. I 

X Ho slgmPcsm privacy imw® for privacy I ssoes arc aaolmogcsl}. f 

Other ' [ 


| Applicable SO^Cs): JAQI CfotapPief %Stems Activity aM Access fe cetris (BfoifofoB and tic. FBI Central 

I Boeppls System. pbsttefoPBIAMC) 

| " ‘ ^ ~'" V " ~~ , w .~. -:- 

I hfotlfo FBI mtt per MUM) 190.2. J? MM ... Afom-See sample EC os PCLU mlmeet «Vhaffo Bare: 

| fPtp'?AtO£omPOAXIC/IAB/PCLy/Povsa¥CmtIM2PLthottias$y2PCifersrOMoy for cc,wp<! 

| SORH/SO-BH msisirmfspri^titcBI ,_X„Ho Y es 

| P?otmro/mviso/arid Privacy Act feX$) statements for mlatcri forms/ JX N o Yes 


| P.PCOBBS. The program si^oaM eousati -witfe MMO to ibmfo#foteselve asty Fetism! roaords/ciaoittaric meessis sssoes > 

I tiro system stray coatsm Federal r coords whether or cot it mmtalas fYriacy Am espests aadt. la mj : everfo a meetds 
1 srihefotle approved by tiro BaifoasI Archives aad toeefos Admmisimrim is ssocossary. IIMO c&o provide- advice art this j 
I as well as rat or 
I Ofoer: 


| _P^ : Chief 

| Itovacy sad Civi l foriorries Clss.it 
I lames I. Imtfom,, Bepaty Cloaeral Coratsol 
| FBI Privacy atset Civil liberties Officer 


Signatory. 
Batp: IwaM 


> 4 >^V $VY ^ 


Dsfe Ste&ed:*^ 


| b6 
4 b7C 


ss :>• :,v\ 
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b7E 


it appears wMms the audit lug. 


The only F|J maintained wilt feu the M 


CM v a select mom of indi v tfeds fam mm&4 
mmt tot, In 


user's !0.ftultSriSSajfe^ 


iiitlM: 


us.bg their unique user ID md password Based on the 
~~~|ls efele to datemane: what teeeas the 


individual should have within the system. 


1 


_| t here wet fee bo jametai users wM have daect access to the ! I 


Ip audit ifeg.eaptwee atl aetlmtv witmo the 


iselndlug the user's 


name, data time, what action occurred, -and whet commands were am fey the user. 


b7E 


b7E 


b7E 


b7E 


S, Does the systemrprojwi collect, mm%M% or disseminate any time? 

individuals (i.e. ; a human feeing or natural fxtrson, regardless of nationality}? 


.. X... HO The os 

IES 
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3, Please indicate if aay of the following elteaetmstks apply to the infeamafioo m the 
system- about kdiw&tals; Beat m mind that &>§«on IisfbnMtiop may identity or be 
liakahle m an ludiylduai. 

(Cheek all that apply.) 


he imbratthoo dkeetly tdeteies sptefk tebw.du&is. 




Tie frr&aaoation E intended m be used, bt coraanetioo with ether dim elements, 
to Iwitetly Identify Recife fedikklosfe 

The tefbemtiioo caw be used. IP distiegoisti or fssoe.*- htdtvi#u&l*a Identity (io; v 
1$ linked or linkable to speotio mdisddMlelt 


/ None of the above. If hoop of the above, deshtsbe why the tbfemafloa does not 
Identify specific iodkidoak either direct!? or Indirectly.. 



4. Does the systenPj 
consultants? 


sramem employees, commuters, or 


MO 


YES 


1 Is Inhmnation shoot Uaited State eitteoa or lawfully admitted perrna neat resident 
ahenrrpleyad from the symamfpnc|eet by name or other personal Idenifter? 


no, 


YES.. 


6, Does the aytemfprpteet eoleet thy lefbrroatioo directly front the person who is the 
subject of the mform&tion? 


ill 


a.. Dees tie syataokprp|ect support erintlmd,, €11' ? or PCI iaeestlgatboa or 

MseMmmt 


m 


yes* 


i)M€ibSSd:t:i:t;i>//tY>it oieeciwi, lse only 


















b. Are subjects of informationfrom the iidividbals that the information is direc 
collected provided a written Privacy Act C#(3) m the collection form o; 

'via a separate notice)? 


NO 



ienttfy any farms* paper m electronic, used to mpest swh 


7 . Are Social So 
system/project? 


SSNs should only be used as Identifiers In limited instances. 


..SSNs are necessary to estshhsbfeonSrm the identity of subjects, vletlmy. 

witnesses or sources m this law enforcement or intelligence activity. 


SSNs are necessary to identify FBI personae! in. this internal administrative 


system. 


SSNs are important for other reasons. 1 


__The system/prqiect provides special protection to SSNs (eg., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 


It is not feasible for the system/project to provide special protection to 


la the sy stem operated by a contractor 
_ N o. 

. .Yea. Information systems operated by contractors for the FBI may be 

considered iMvagy Act eystemt ufreeoAlS:, The Federal Acpuialtion Aeprladon 
contains standard contract clauses that must be included in the event the system 
collects* maintains or disseminates FU and additional repniretnents may be 
imposed as a matter of Department of Instlce policy. Consultations with, the 
CMrce of the deneral Counsel may be retplred if a. contra ctor is operati ng the 
system itr the FBI 
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Ifc lie system undegggctfte Certlfiesoors. Aeeredltstioo {€&A} fey ibe FBI 
Sesont? l>kM0M f Se0347 


NO IFom Imieete 




««md««e l»t: mmmm% tt u. 


IA emmMw 


iif? Low Meierste 'EM 


Low Moderate lliyh I’aMarf 


j,ow_Meierttie_lllffe_Cbielieett 


Not seglksbte •••• this system A ooly pspitAaseti 


Does the system comittei data mmng as defeed m Sectkm 804 of the 
Lrtpfememmg BeeoemmtOaOeos of the W1! Comtmssloe Act of200A PL. DO¬ 
SS fcomfkd k 42 NSC 20CMke~3)? 


If ml, please femle the Be 


11, & this a oftkhil seeertty system tbs deteoktted by the SeoD)f 


f 2, Status of System/ Proleeh 


This it law system/ k^feet m beyetopmek. 


IF INISTfNCS^SlSsMS/rfl/AriCfS 


3. Wltea m lie system/peieet tkvehpedf 


2 , Flos the systeotiroieet aodergoee aoy sigmliesot ebasyes smce April 17,2003? 

,, NO [if«o, ipestsfit |S3).l 


IBS if yes, kkkafe wbktb of the fblfevmg ekttties were inYohmci rk ei 
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A conversion 


4 tmm4$ WmMmlt&mc system. 


A ctomg^ from ktmtmijm li a format that Is or i» 

idenilatde to a format that la Meat liable to pitlaifar Itnllvidtuds. 

A bow use of art IT aptemtprc^eoh inetedlng application of a iiew 
technology, that changes how information In identifiable form is tfpaged. 
(For mmtxpit, a change that would create a more open enwronment and/or 
avenue for exposure of data that previously did not exist) 

____ A change that results m kfoatnatfon In idenfiinhle form being 
merged, eontrahaed, or matched with other databases. 

A new method of authentfeatiog the use of and access to 
information in identifiable form by members of the public 

_ A systematic Incorporation of databases of infoonation in 

idenbilabk form garehased or obtained from eonimerclnl or pobie sources, 

_ A new interagency nm or shared agency function that results in 

new uses or exchanges of information in identifiable form, 

_ A change that results in a new use or disclosure of information in 

identifiable form, 

A change that results in new hems of information in identifiable 
form being added info the system/protect, 

_ Changes do not involve a change in the t ype of records maintained?: 

the imividnais m whom records are maintained, or the use or 
dissemination of liifonation from the sysleobprofaet. 

:s a PfA for this systentforoject already exist? 

MO YES 


M Idas the s|ftem^roteet undergone any significant changes since the PIA? 


















